@kungfu-tech/buildchain 3.0.5-alpha.8 → 3.0.6-alpha.0

package/dist/site/page-registry.json

@@ -8,7 +8,7 @@
     "rendererOwner": "site repository",
     "rule": "Site repositories render these markdown pages and metadata; they do not maintain separate Buildchain product copy."
   },
-  "pageCount": 63,
+  "pageCount": 64,
   "categories": [
     "action",
     "api",
@@ -334,7 +334,7 @@
       ],
       "maturity": "preview",
       "sourcePath": "docs/auditable-demo.md",
-      "digest": "sha256:a99175216b3774748b253814c1933683cace8107a34083dd711f639f3e680c61",
+      "digest": "sha256:7e1426d8200bd4e7a7e6684c872f47075cd37d0bddbb262ea3263eaad846b540",
       "headings": [
         {
           "level": 1,
@@ -377,7 +377,7 @@
           "anchor": "failure-evidence"
         }
       ],
-      "markdown": "---\nstatus: draft\nperiod: 2026-07\ntheme: auditable-demo-pipeline\ndoc_type: technical-contract\nsource_level: local-files\nconfidence: high\nsensitivity: public\nevidence_grade: A\nreview_state: self-reviewed\nlast_reviewed: 2026-08-02\nai_provenance:\n  model_family: GPT-5\n  product: Codex\n  generated_at: 2026-08-02\n  invisible_context_boundary: No hidden model build, parameter count, or private corpus is asserted.\n---\n\n# Auditable Demo Pipeline\n\nBuildchain's auditable demo workflow turns an exact GitHub build artifact into\ntwo distinct evidence products:\n\n1. a required qualified Gate bundle; and\n2. an optional rendered media bundle that can exist only after that exact Gate\n   bundle passes.\n\nThe public reusable workflow is\n`.github/workflows/.auditable-demo.yml`. It is consumer-neutral: Buildchain\ndoes not know how a Kungfu, library, service, or application artifact should be\ninterpreted. The consumer owns a small checked-in executable adapter.\n\nFor standalone binary CLIs, the higher-level first-class surface is\n`.github/workflows/.declarative-auditable-demo.yml`. A consumer checks in only\n`.buildchain/auditable-demo.json`, builds and uploads its exact same-run binary\nplus metadata, and passes the producer-owned artifact name and digest to that\nworkflow. Buildchain then owns capture, Gate adaptation, independent native\n1080p and 720p rendering, Release Passport construction, content-addressed\nmaterialization, and the protected README update pull request. No\nproduct-specific capture, adapter, passport, or materializer is required.\n\n## Declarative Standalone Binary Scenarios\n\nThe schema is `contracts/auditable-demo-scenario-v1.schema.json`. One scenario\ncan declare up to eight demos, and each demo can contain up to twelve ordered\nliteral argv steps. Steps in one demo share a disposable workspace; separate\ndemos and the two rendition captures do not. Commands are never accepted as a\nshell string. An omitted or explicit `standard` duration class remains bounded\nto 60 seconds. A reviewed `execution.durationClass: long-form` declaration may\nraise the scenario and literal step ceilings to 180 seconds; it does not change\nthe default. Both classes retain 4 MiB per step, a clean Home/XDG environment,\nno inherited credentials, and a network-disabled read-only container with\nbounded tmpfs.\n\nThe uploaded metadata must bind the executable SHA-256 and declare an empty\nruntime dependency set. Capture rejects an artifact name or upload digest that\ndoes not resolve to exactly one live artifact from the current workflow run.\nIt retains ANSI terminal bytes with the real PTY read timestamps, verifies\ndeclared stdout and JSON file facts, enforces the total deadline while a step is\nrunning, and removes the disposable workspace before emitting evidence.\n\nBoth manual validation and alpha or release refreshes call the same reusable\nworkflow. Manual callers select Gate-only or full rendering and can explicitly\nrequest a materialization PR. Release callers select full rendering and the\nsame materializer automatically; there is no separate release-only recording\nimplementation. Publication requires a dedicated update token and target\nbranch. The token is an explicit bounded capability, while actor identity,\nfirst-party/System classification, KFD compliance, Product System metadata,\npackage metadata, registry history, scans, and generated evidence grant no\nauthority.\n\n```yaml\njobs:\n  demo:\n    needs: exact-binary\n    uses: kungfu-systems/buildchain/.github/workflows/.declarative-auditable-demo.yml@BUILDCHAIN_EXACT_SHA\n    with:\n      source-ref: ${{ github.sha }}\n      binary-artifact-name: ${{ needs.exact-binary.outputs.artifact-name }}\n      binary-artifact-digest: ${{ needs.exact-binary.outputs.artifact-digest }}\n      scenario-path: .buildchain/auditable-demo.json\n      renderer-image: ghcr.io/kungfu-systems/build-images/demo-renderer@sha256:RENDERER_DIGEST\n      render-media: true\n      media-profile: responsive-web-delivery-v1\n      materialize: true\n      materialize-base-ref: dev/v1/v1.0\n    secrets:\n      DEMO_UPDATE_TOKEN: ${{ secrets.DEMO_UPDATE_TOKEN }}\n```\n\nBuildchain recursively consumes this surface in\n`.github/workflows/auditable-demo.yml` using its own exact standalone binary\nand the beginner bootstrap scenario in `.buildchain/auditable-demo.json`.\n\n## Authority Boundary\n\nThe retained build output is authoritative. The adapter reads that exact\nartifact and projects three files:\n\n```text\ncomplete-transcript.txt\npublic-projection.json\nscene.json\n```\n\nIt may additionally emit one declared `terminal-capture.json` using\n`kungfu.terminal-capture/v1`. The optional capture is bounded to 60 seconds by\ndefault or 180 seconds only when its scene explicitly declares `long-form`,\nfixed 80-200 by 24-80 terminal cells, 10,000 events, and 4 MiB of canonical\nbase64 bytes. It must contain a qualified completion sentinel and an explicitly\nempty authority-grant list. Existing three-file adapters remain valid.\n\nThe completion sentinel names a consumer-owned versioned schema, the exact\n`qualified` status, a content root, and an event count. Buildchain validates\nthat envelope generically; it does not reinterpret a command-specific result\nas Agent Work Lab evidence or grant authority from the schema name. The\nconsumer projection and its retained source artifact remain responsible for\nthe exact claim boundary.\n\nTerminal bytes are volatile observations, not Work, Warrant, capability, or\npublication authority. First-party or System identity, KFD compliance, Product\nSystem metadata, package metadata, scan output, registry history, and\nstandalone generation remain non-authoritative unless an exact higher-level\ncontract independently admits them.\n\nThe adapter must not rebuild or rerun the product. It receives:\n\n```text\n--artifact-root PATH\n--output PATH\n--source-coordinate PATH\n```\n\nConsumers with one shared adapter for several deterministic demos may also set\n`adapter-arguments-json` to a bounded JSON array. Buildchain parses the array,\nrejects malformed values, newlines, NUL bytes, more than 32 arguments, values\nlonger than 256 bytes, and attempts to override the three coordinate flags\nabove, then appends the accepted strings directly to the adapter argv. It never\nevaluates a shell command. The exact argument vector and its content root are\nretained in `adapter.json`; the Gate receipt binds that root. Adapter arguments\nselect consumer-owned capture behavior only and grant no authority.\n\n`--source-coordinate` identifies the caller repository, run, artifact id,\nartifact name, upload digest, expiry, and exact source SHA. The workflow finds\nexactly one live artifact with the requested name in the current caller run and\nrejects a digest mismatch before invoking the adapter. Callers must pass the\ndigest emitted by their own `upload-artifact` step; a name resolved later from\nthe Actions API is discovery evidence, not a substitute for that producer\noutput.\n\nBuildchain's reusable build workflow exposes `artifact-coordinates-json` after\nall resolved platform uploads complete. That producer-owned output binds every\nplatform id to its same-run artifact id, name, upload digest, URL, and expiry,\nso a consumer that delegates its build to Buildchain can pass an exact\ncoordinate without rediscovering authority in a downstream job. The build\naggregate fails closed if any declared platform lacks one live, digest-bearing\nartifact coordinate. The compact coordinate set is sorted by platform id so\ndownstream machine consumers do not depend on matrix completion order.\n\nThe adapter runs with a disposable Home/XDG/npm prefix, a minimal environment,\nand no GitHub, npm, or cloud credential injection. It must be a regular,\nnon-symlink, executable file inside the exact checked-out consumer source.\n\n## Required Gate\n\nThe Gate:\n\n- checks out the exact consumer source and exact called-workflow SHA;\n- resolves and downloads one exact same-run GitHub Artifact;\n- invokes the checked-in adapter by argv, never as an evaluated shell string;\n- rejects undeclared adapter outputs, symlinks, invalid UTF-8, invalid scene or\n  projection or terminal-capture schemas, implicit capture grants,\n  out-of-range transcript references, and oversized input;\n- derives a one-second compatibility scene from the consumer projection;\n- anonymously pulls an immutable `image@sha256:digest` renderer;\n- runs it as non-root with `--network none`, a read-only root filesystem, and a\n  bounded tmpfs;\n- verifies the renderer manifest, media probe, exact input roots, exact output\n  member set, and complete checksums;\n- uploads a content-addressed qualified bundle plus an independent GitHub\n  Artifact id, URL, archive digest, and expiry-bearing source coordinate.\n\nThe Gate bundle contains the complete consumer transcript/projection/scene,\nsource artifact coordinate, adapter identity, bounded renderer evidence, a\npassed gate receipt, and checksums covering every member exactly once.\n\n## Selective Render\n\n`render-media: true` enables the second job. It downloads the just-uploaded Gate\nbundle by its content-addressed name, recomputes the Gate member root, verifies\nthe exact source SHA and renderer digest, and only then renders the complete\nqualified scene.\n\nThe media bundle contains MP4, WebM, GIF, poster, probe, renderer manifest,\nrenderer checksums, passed Gate receipt, a versioned media receipt, and\ndistribution checksums. A web-delivery profile also retains\n`media-inspection.json`, whose content root is bound into the receipt.\n`render-media: false` does not weaken or skip the Gate.\n\nWhen the Gate bundle contains a qualified terminal capture, the render job\npasses it read-only to the immutable renderer. The renderer manifest binds the\ncapture root and terminal-state-machine version, but raw capture bytes remain\nin the Gate bundle rather than being copied into the public media bundle.\n\n## Media Qualification Profiles\n\nThe single machine-readable source is\n`contracts/auditable-demo-media-profiles-v1.json`. Callers select one reviewed\nprofile through `media-profile`; they cannot pass ffmpeg commands, codec flags,\nshell fragments, arbitrary profile paths, or transcoding instructions.\n\n| Profile | Meaning |\n| --- | --- |\n| `archive-v1` | Default compatibility contract. Retains the exact renderer outputs and classifies GIF as README compatibility evidence without making a browser-delivery claim. |\n| `web-delivery-v1` | Independently qualifies H.264 MP4 and VP9 WebM playback sources, forbids audio, requires exact scene dimensions and bounded duration/frame-rate drift, checks per-rendition byte ceilings, and proves MP4 `moov` precedes `mdat`. PNG remains the lossless evidence poster. |\n| `responsive-web-delivery-v1` | Extends `web-delivery-v1` with exact 1280x720 H.264 MP4 and VP9 WebM responsive sources plus a 1280x720 README GIF while keeping the primary MP4/WebM and evidence poster at the source scene dimensions. Every declared downscale must preserve the scene aspect ratio and may never upscale. |\n| `responsive-long-form-web-delivery-v1` | Extends the responsive profile for explicitly admitted long-form scenes. Its measured-baseline multipliers raise only the GIF ceiling to 8 MiB and the four video ceilings to 4 MiB; all codec, native-resolution, no-audio, duration, and authority checks remain unchanged. |\n| `site-hero-v1` | Extends `web-delivery-v1` and additionally requires a qualified WebP browser poster. The current Build Images v1 renderer does not emit that member, so selecting this profile fails closed until the producer adds it. |\n\nFor web-delivery profiles, Buildchain runs its own fixed `ffprobe` invocation\ninside the same immutable, network-disabled renderer image. That command is\nBuildchain-controlled; the producer cannot inject flags. The resulting witness\nrecords exact roots and byte counts plus container, codec, pixel format,\ndimensions, duration, frame rate, audio stream count, and progressive-download\nevidence. Finalization re-hashes the retained bytes, rechecks the witness root,\nand parses MP4 top-level boxes itself. The producer's `media-probe.json.passed`\nfield remains supporting evidence, never sufficient authority.\n\nThe default `archive-v1` path preserves the existing v1 media receipt exactly.\nAn explicitly selected web-delivery profile emits a v2 media receipt with a\ncontent-addressed rendition list and explicit roles, MIME types, dimensions,\nand dimension policy. Agents and site builds select `primary-video`,\n`alternate-video`, `responsive-primary-video`,\n`responsive-alternate-video`, `browser-poster`, or evidence-only roles from\nthat receipt; they do not infer semantics from extensions or filenames.\nProfile-declared responsive renditions must match their exact dimensions,\nremain within the source scene, and preserve its aspect ratio. Additional\nproducer-declared renditions remain bounded by the selected profile and cannot\nraise their own byte ceiling. Unbound outputs, implicit upscales, aspect-ratio\ndrift, duplicate singleton roles, unknown profiles, or unsupported required\nversions fail closed.\n\nThe required Gate binds the exact selected media profile and the smoke media\nqualification root before optional full rendering starts. Gate-only validation\nand full rendering therefore exercise the same profile contract; a later media\njob cannot silently switch rendition authority.\n\nInitial byte ceilings are derived from the checked-in\n`auditable-demo-web-delivery-v1` fixture rendered by Build Images\n`v1.3.0-alpha.16` at its exact source SHA and image digest. GIF, MP4, WebM, and\nPNG ceilings are the next power of two above sixteen times the measured member\nbytes. The explicit responsive long-form profile derives its 4 MiB video and\n8 MiB GIF ceilings from the same observed bytes at a bounded 128-times\nmultiplier; it does not change another profile. The not-yet-produced WebP poster\nuses eight times the measured lossless PNG as its conservative proxy. The path-scoped qualification workflow\nregenerates the content-addressed evidence and fails on any byte or fact drift.\nIts matrix retains the original 1280x720 web-delivery baseline on the renderer\nthat produced it and separately measures the responsive profile against a\n1920x1080 fixture and the first exact renderer release that emits both\nsource-resolution and 720p renditions. This keeps historical budget evidence\nreproducible while giving the responsive contract its own immutable\nqualification root.\n\n## Consumer Example\n\nThe build job must expose both the exact artifact name and the digest returned\nby `upload-artifact`:\n\n```yaml\njobs:\n  build:\n    runs-on: ubuntu-24.04\n    outputs:\n      artifact-name: product-linux-${{ github.sha }}\n      artifact-digest: ${{ steps.upload.outputs.artifact-digest }}\n    steps:\n      - uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09\n      - run: ./scripts/build-product\n      - id: upload\n        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a\n        with:\n          name: product-linux-${{ github.sha }}\n          path: dist\n          if-no-files-found: error\n          retention-days: 14\n          compression-level: 0\n\n  auditable-demo:\n    needs: build\n    permissions:\n      actions: read\n      contents: read\n    uses: kungfu-systems/buildchain/.github/workflows/.auditable-demo.yml@BUILDCHAIN_EXACT_SHA\n    with:\n      source-ref: ${{ github.sha }}\n      source-artifact-name: ${{ needs.build.outputs.artifact-name }}\n      source-artifact-digest: ${{ needs.build.outputs.artifact-digest }}\n      adapter-path: scripts/auditable-demo-adapter\n      adapter-arguments-json: '[\"--demo-id\",\"agent-work-lab\"]'\n      renderer-image: ghcr.io/kungfu-systems/build-images/demo-renderer@sha256:RENDERER_DIGEST\n      render-media: false\n      media-profile: archive-v1\n```\n\nReplace both placeholders with reviewed immutable SHAs or digests. An eligible\nbuild should always call the reusable workflow. Selection policy changes only\n`render-media`; it must never condition away the Gate job.\n\nUse `web-delivery-v1` only when the rendered bundle is intended to become a\nqualified web-delivery source. Use `site-hero-v1` when an optimized browser\nposter is also required. Select `responsive-long-form-web-delivery-v1` only\nwith an explicit long-form scenario. Profile qualification does not prove browser playback,\nresponsive layout, reduced-motion behavior, accessibility, or production\ndeployment; those remain site responsibilities.\n\n## Failure Evidence\n\nGate and render jobs use bounded timeouts and non-cancelling concurrency.\nDiagnostics artifacts are attempted with `always()` so adapter stdout/stderr\nand the resolved source coordinate remain available when qualification fails.\nNo production deployment, publication authority, token, or provider mutation\nis part of this workflow."
+      "markdown": "---\nstatus: draft\nperiod: 2026-07\ntheme: auditable-demo-pipeline\ndoc_type: technical-contract\nsource_level: local-files\nconfidence: high\nsensitivity: public\nevidence_grade: A\nreview_state: self-reviewed\nlast_reviewed: 2026-08-02\nai_provenance:\n  model_family: GPT-5\n  product: Codex\n  generated_at: 2026-08-02\n  invisible_context_boundary: No hidden model build, parameter count, or private corpus is asserted.\n---\n\n# Auditable Demo Pipeline\n\nBuildchain's auditable demo workflow turns an exact GitHub build artifact into\ntwo distinct evidence products:\n\n1. a required qualified Gate bundle; and\n2. an optional rendered media bundle that can exist only after that exact Gate\n   bundle passes.\n\nThe public reusable workflow is\n`.github/workflows/.auditable-demo.yml`. It is consumer-neutral: Buildchain\ndoes not know how a Kungfu, library, service, or application artifact should be\ninterpreted. The consumer owns a small checked-in executable adapter.\n\nFor standalone binary CLIs, the higher-level first-class surface is\n`.github/workflows/.declarative-auditable-demo.yml`. A consumer checks in only\n`.buildchain/auditable-demo.json`, builds and uploads its exact same-run binary\nplus metadata, and passes the producer-owned artifact name and digest to that\nworkflow. Buildchain then owns capture, Gate adaptation, independent native\n1080p and 720p rendering, Release Passport construction, content-addressed\nmaterialization, and the protected README update pull request. No\nproduct-specific capture, adapter, passport, or materializer is required.\n\n## Declarative Standalone Binary Scenarios\n\nThe schema is `contracts/auditable-demo-scenario-v1.schema.json`. One scenario\ncan declare up to eight demos, and each demo can contain up to twelve ordered\nliteral argv steps. Steps in one demo share a disposable workspace; separate\ndemos and the two rendition captures do not. Commands are never accepted as a\nshell string. An omitted or explicit `standard` duration class remains bounded\nto 60 seconds. A reviewed `execution.durationClass: long-form` declaration may\nraise the scenario and literal step ceilings to 180 seconds; it does not change\nthe default. Both classes retain 4 MiB per step, a clean Home/XDG environment,\nno inherited credentials, and a network-disabled read-only container with\nbounded tmpfs.\n\nThe uploaded metadata must bind the executable SHA-256, declare an empty\nruntime dependency set, and provide a bounded `executableFiles` array of exact\nartifact-relative paths and SHA-256 digests. GitHub Artifact transport does not\nretain Unix executable modes, so Buildchain restores mode `0755` only for this\ndigest-verified executable closure and verifies the same closure again inside\nthe network-disabled capture boundary. It never recursively changes artifact\nmodes. This metadata controls assembly only and grants no execution,\npublication, or identity authority. Capture rejects an artifact name or upload\ndigest that does not resolve to exactly one live artifact from the current workflow run.\n\nConsumers may also declare one bounded, non-interactive `transportSmoke` argv\nin the same scenario and opt the reusable build into\n`pre-upload-transport-smoke-scenario-path`. Before any GitHub Artifact or S3\nrelay upload, Buildchain copies the exact distribution directory, removes Unix\nexecute bits to simulate transport, restores only the digest-bound executable\nclosure, and runs that real binary with a clean Home/XDG environment. A missing\nlauncher, runtime, or embedded interpreter therefore fails before the expensive\nupload begins. This is a transport diagnostic with no authority grants; the\nlater network-disabled capture and Gate remain the qualification authority.\nIt retains ANSI terminal bytes with the real PTY read timestamps, verifies\ndeclared stdout and JSON file facts, enforces the total deadline while a step is\nrunning, and removes the disposable workspace before emitting evidence.\n\nBoth manual validation and alpha or release refreshes call the same reusable\nworkflow. Manual callers select Gate-only or full rendering and can explicitly\nrequest a materialization PR. Release callers select full rendering and the\nsame materializer automatically; there is no separate release-only recording\nimplementation. Publication requires a dedicated update token and target\nbranch. The token is an explicit bounded capability, while actor identity,\nfirst-party/System classification, KFD compliance, Product System metadata,\npackage metadata, registry history, scans, and generated evidence grant no\nauthority.\n\n```yaml\njobs:\n  demo:\n    needs: exact-binary\n    uses: kungfu-systems/buildchain/.github/workflows/.declarative-auditable-demo.yml@BUILDCHAIN_EXACT_SHA\n    with:\n      source-ref: ${{ github.sha }}\n      binary-artifact-name: ${{ needs.exact-binary.outputs.artifact-name }}\n      binary-artifact-digest: ${{ needs.exact-binary.outputs.artifact-digest }}\n      scenario-path: .buildchain/auditable-demo.json\n      renderer-image: ghcr.io/kungfu-systems/build-images/demo-renderer@sha256:RENDERER_DIGEST\n      render-media: true\n      media-profile: responsive-web-delivery-v1\n      materialize: true\n      materialize-base-ref: dev/v1/v1.0\n    secrets:\n      DEMO_UPDATE_TOKEN: ${{ secrets.DEMO_UPDATE_TOKEN }}\n```\n\nBuildchain recursively consumes this surface in\n`.github/workflows/auditable-demo.yml` using its own exact standalone binary\nand the beginner bootstrap scenario in `.buildchain/auditable-demo.json`.\n\n## Authority Boundary\n\nThe retained build output is authoritative. The adapter reads that exact\nartifact and projects three files:\n\n```text\ncomplete-transcript.txt\npublic-projection.json\nscene.json\n```\n\nIt may additionally emit one declared `terminal-capture.json` using\n`kungfu.terminal-capture/v1`. The optional capture is bounded to 60 seconds by\ndefault or 180 seconds only when its scene explicitly declares `long-form`,\nfixed 80-200 by 24-80 terminal cells, 10,000 events, and 4 MiB of canonical\nbase64 bytes. It must contain a qualified completion sentinel and an explicitly\nempty authority-grant list. Existing three-file adapters remain valid.\n\nThe completion sentinel names a consumer-owned versioned schema, the exact\n`qualified` status, a content root, and an event count. Buildchain validates\nthat envelope generically; it does not reinterpret a command-specific result\nas Agent Work Lab evidence or grant authority from the schema name. The\nconsumer projection and its retained source artifact remain responsible for\nthe exact claim boundary.\n\nTerminal bytes are volatile observations, not Work, Warrant, capability, or\npublication authority. First-party or System identity, KFD compliance, Product\nSystem metadata, package metadata, scan output, registry history, and\nstandalone generation remain non-authoritative unless an exact higher-level\ncontract independently admits them.\n\nThe adapter must not rebuild or rerun the product. It receives:\n\n```text\n--artifact-root PATH\n--output PATH\n--source-coordinate PATH\n```\n\nConsumers with one shared adapter for several deterministic demos may also set\n`adapter-arguments-json` to a bounded JSON array. Buildchain parses the array,\nrejects malformed values, newlines, NUL bytes, more than 32 arguments, values\nlonger than 256 bytes, and attempts to override the three coordinate flags\nabove, then appends the accepted strings directly to the adapter argv. It never\nevaluates a shell command. The exact argument vector and its content root are\nretained in `adapter.json`; the Gate receipt binds that root. Adapter arguments\nselect consumer-owned capture behavior only and grant no authority.\n\n`--source-coordinate` identifies the caller repository, run, artifact id,\nartifact name, upload digest, expiry, and exact source SHA. The workflow finds\nexactly one live artifact with the requested name in the current caller run and\nrejects a digest mismatch before invoking the adapter. Callers must pass the\ndigest emitted by their own `upload-artifact` step; a name resolved later from\nthe Actions API is discovery evidence, not a substitute for that producer\noutput.\n\nBuildchain's reusable build workflow exposes `artifact-coordinates-json` after\nall resolved platform uploads complete. That producer-owned output binds every\nplatform id to its same-run artifact id, name, upload digest, URL, and expiry,\nso a consumer that delegates its build to Buildchain can pass an exact\ncoordinate without rediscovering authority in a downstream job. The build\naggregate fails closed if any declared platform lacks one live, digest-bearing\nartifact coordinate. The compact coordinate set is sorted by platform id so\ndownstream machine consumers do not depend on matrix completion order.\n\nThe adapter runs with a disposable Home/XDG/npm prefix, a minimal environment,\nand no GitHub, npm, or cloud credential injection. It must be a regular,\nnon-symlink, executable file inside the exact checked-out consumer source.\n\n## Required Gate\n\nThe Gate:\n\n- checks out the exact consumer source and exact called-workflow SHA;\n- resolves and downloads one exact same-run GitHub Artifact;\n- invokes the checked-in adapter by argv, never as an evaluated shell string;\n- rejects undeclared adapter outputs, symlinks, invalid UTF-8, invalid scene or\n  projection or terminal-capture schemas, implicit capture grants,\n  out-of-range transcript references, and oversized input;\n- derives a one-second compatibility scene from the consumer projection;\n- anonymously pulls an immutable `image@sha256:digest` renderer;\n- runs it as non-root with `--network none`, a read-only root filesystem, and a\n  bounded tmpfs;\n- verifies the renderer manifest, media probe, exact input roots, exact output\n  member set, and complete checksums;\n- uploads a content-addressed qualified bundle plus an independent GitHub\n  Artifact id, URL, archive digest, and expiry-bearing source coordinate.\n\nThe Gate bundle contains the complete consumer transcript/projection/scene,\nsource artifact coordinate, adapter identity, bounded renderer evidence, a\npassed gate receipt, and checksums covering every member exactly once.\n\n## Selective Render\n\n`render-media: true` enables the second job. It downloads the just-uploaded Gate\nbundle by its content-addressed name, recomputes the Gate member root, verifies\nthe exact source SHA and renderer digest, and only then renders the complete\nqualified scene.\n\nThe media bundle contains MP4, WebM, GIF, poster, probe, renderer manifest,\nrenderer checksums, passed Gate receipt, a versioned media receipt, and\ndistribution checksums. A web-delivery profile also retains\n`media-inspection.json`, whose content root is bound into the receipt.\n`render-media: false` does not weaken or skip the Gate.\n\nWhen the Gate bundle contains a qualified terminal capture, the render job\npasses it read-only to the immutable renderer. The renderer manifest binds the\ncapture root and terminal-state-machine version, but raw capture bytes remain\nin the Gate bundle rather than being copied into the public media bundle.\n\n## Media Qualification Profiles\n\nThe single machine-readable source is\n`contracts/auditable-demo-media-profiles-v1.json`. Callers select one reviewed\nprofile through `media-profile`; they cannot pass ffmpeg commands, codec flags,\nshell fragments, arbitrary profile paths, or transcoding instructions.\n\n| Profile | Meaning |\n| --- | --- |\n| `archive-v1` | Default compatibility contract. Retains the exact renderer outputs and classifies GIF as README compatibility evidence without making a browser-delivery claim. |\n| `web-delivery-v1` | Independently qualifies H.264 MP4 and VP9 WebM playback sources, forbids audio, requires exact scene dimensions and bounded duration/frame-rate drift, checks per-rendition byte ceilings, and proves MP4 `moov` precedes `mdat`. PNG remains the lossless evidence poster. |\n| `responsive-web-delivery-v1` | Extends `web-delivery-v1` with exact 1280x720 H.264 MP4 and VP9 WebM responsive sources plus a 1280x720 README GIF while keeping the primary MP4/WebM and evidence poster at the source scene dimensions. Every declared downscale must preserve the scene aspect ratio and may never upscale. |\n| `responsive-long-form-web-delivery-v1` | Extends the responsive profile for explicitly admitted long-form scenes. Its measured-baseline multipliers raise only the GIF ceiling to 8 MiB and the four video ceilings to 4 MiB; all codec, native-resolution, no-audio, duration, and authority checks remain unchanged. |\n| `site-hero-v1` | Extends `web-delivery-v1` and additionally requires a qualified WebP browser poster. The current Build Images v1 renderer does not emit that member, so selecting this profile fails closed until the producer adds it. |\n\nFor web-delivery profiles, Buildchain runs its own fixed `ffprobe` invocation\ninside the same immutable, network-disabled renderer image. That command is\nBuildchain-controlled; the producer cannot inject flags. The resulting witness\nrecords exact roots and byte counts plus container, codec, pixel format,\ndimensions, duration, frame rate, audio stream count, and progressive-download\nevidence. Finalization re-hashes the retained bytes, rechecks the witness root,\nand parses MP4 top-level boxes itself. The producer's `media-probe.json.passed`\nfield remains supporting evidence, never sufficient authority.\n\nThe default `archive-v1` path preserves the existing v1 media receipt exactly.\nAn explicitly selected web-delivery profile emits a v2 media receipt with a\ncontent-addressed rendition list and explicit roles, MIME types, dimensions,\nand dimension policy. Agents and site builds select `primary-video`,\n`alternate-video`, `responsive-primary-video`,\n`responsive-alternate-video`, `browser-poster`, or evidence-only roles from\nthat receipt; they do not infer semantics from extensions or filenames.\nProfile-declared responsive renditions must match their exact dimensions,\nremain within the source scene, and preserve its aspect ratio. Additional\nproducer-declared renditions remain bounded by the selected profile and cannot\nraise their own byte ceiling. Unbound outputs, implicit upscales, aspect-ratio\ndrift, duplicate singleton roles, unknown profiles, or unsupported required\nversions fail closed.\n\nThe required Gate binds the exact selected media profile and the smoke media\nqualification root before optional full rendering starts. Gate-only validation\nand full rendering therefore exercise the same profile contract; a later media\njob cannot silently switch rendition authority.\n\nInitial byte ceilings are derived from the checked-in\n`auditable-demo-web-delivery-v1` fixture rendered by Build Images\n`v1.3.0-alpha.16` at its exact source SHA and image digest. GIF, MP4, WebM, and\nPNG ceilings are the next power of two above sixteen times the measured member\nbytes. The explicit responsive long-form profile derives its 4 MiB video and\n8 MiB GIF ceilings from the same observed bytes at a bounded 128-times\nmultiplier; it does not change another profile. The not-yet-produced WebP poster\nuses eight times the measured lossless PNG as its conservative proxy. The path-scoped qualification workflow\nregenerates the content-addressed evidence and fails on any byte or fact drift.\nIts matrix retains the original 1280x720 web-delivery baseline on the renderer\nthat produced it and separately measures the responsive profile against a\n1920x1080 fixture and the first exact renderer release that emits both\nsource-resolution and 720p renditions. This keeps historical budget evidence\nreproducible while giving the responsive contract its own immutable\nqualification root.\n\n## Consumer Example\n\nThe build job must expose both the exact artifact name and the digest returned\nby `upload-artifact`:\n\n```yaml\njobs:\n  build:\n    runs-on: ubuntu-24.04\n    outputs:\n      artifact-name: product-linux-${{ github.sha }}\n      artifact-digest: ${{ steps.upload.outputs.artifact-digest }}\n    steps:\n      - uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09\n      - run: ./scripts/build-product\n      - id: upload\n        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a\n        with:\n          name: product-linux-${{ github.sha }}\n          path: dist\n          if-no-files-found: error\n          retention-days: 14\n          compression-level: 0\n\n  auditable-demo:\n    needs: build\n    permissions:\n      actions: read\n      contents: read\n    uses: kungfu-systems/buildchain/.github/workflows/.auditable-demo.yml@BUILDCHAIN_EXACT_SHA\n    with:\n      source-ref: ${{ github.sha }}\n      source-artifact-name: ${{ needs.build.outputs.artifact-name }}\n      source-artifact-digest: ${{ needs.build.outputs.artifact-digest }}\n      adapter-path: scripts/auditable-demo-adapter\n      adapter-arguments-json: '[\"--demo-id\",\"agent-work-lab\"]'\n      renderer-image: ghcr.io/kungfu-systems/build-images/demo-renderer@sha256:RENDERER_DIGEST\n      render-media: false\n      media-profile: archive-v1\n```\n\nReplace both placeholders with reviewed immutable SHAs or digests. An eligible\nbuild should always call the reusable workflow. Selection policy changes only\n`render-media`; it must never condition away the Gate job.\n\nUse `web-delivery-v1` only when the rendered bundle is intended to become a\nqualified web-delivery source. Use `site-hero-v1` when an optimized browser\nposter is also required. Select `responsive-long-form-web-delivery-v1` only\nwith an explicit long-form scenario. Profile qualification does not prove browser playback,\nresponsive layout, reduced-motion behavior, accessibility, or production\ndeployment; those remain site responsibilities.\n\n## Failure Evidence\n\nGate and render jobs use bounded timeouts and non-cancelling concurrency.\nDiagnostics artifacts are attempted with `always()` so adapter stdout/stderr\nand the resolved source coordinate remain available when qualification fails.\nNo production deployment, publication authority, token, or provider mutation\nis part of this workflow."
     },
     {
       "id": "manual:aws-us-elastic-runner-burst-plane",
@@ -604,7 +604,7 @@
       ],
       "maturity": "stable",
       "sourcePath": "docs/cli-reference.md",
-      "digest": "sha256:94207fa353e87b087ecf53b6cebe6dfffdc1311b2b6bc90b511d83d5757e7827",
+      "digest": "sha256:73d34a3b46ecfb772b806f0d79754772446fcc13d7f349b508a0c0212e97fcec",
       "headings": [
         {
           "level": 1,
@@ -1486,6 +1486,11 @@
           "title": "`buildchain release-propagation`",
           "anchor": "buildchain-release-propagation"
         },
+        {
+          "level": 3,
+          "title": "`buildchain release-propagation entry`",
+          "anchor": "buildchain-release-propagation-entry"
+        },
         {
           "level": 3,
           "title": "`buildchain release-propagation pickup`",
@@ -1647,7 +1652,7 @@
           "anchor": "buildchain-web-surface"
         }
       ],
-      "markdown": "---\nstatus: active\nperiod: ongoing\ntheme: buildchain-generated-reference\ndoc_type: technical-reference\nsource_level: local-files\nconfidence: high\nsensitivity: public\nevidence_grade: A\nreview_state: generated\nlast_reviewed: 2026-08-01\nai_provenance:\n  model_family: GPT-5\n  product: Codex\n  generated_at: 2026-08-01\n  invisible_context: not asserted\n---\n\n# Buildchain CLI Reference\n\n> Generated from `BUILDCHAIN_USAGE` and the runtime command registry. Do not edit this file by hand.\n\nEvery listed help command is intercepted before dispatch, exits zero, and performs no command side effects.\n\n## `audit`\n\n### `buildchain audit`\n\n- Help: `buildchain audit --help`\n- Canonical id: `audit`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain audit\n```\n\n### `buildchain audit github-governance`\n\n- Help: `buildchain audit github-governance --help`\n- Canonical id: `audit`\n- Options: `--allow-nonqualifying`, `--environment`, `--job`, `--json`, `--npm-trust-json`, `--organization`, `--output`, `--package`, `--provider-audit-json`, `--publisher-mode`, `--repository`, `--require-qualifying`, `--source-sha`, `--workflow`, `--workflow-ref`, `--workflow-repository`\n- Syntax:\n\n```text\nbuildchain audit github-governance [--organization <owner>] [--repository <owner/repo>] [--output <file>] [--require-qualifying] [--json] [--source-sha <merged-branch-sha>] [--workflow-repository <owner/repo>] [--workflow <path>] [--workflow-ref <sha-or-ref>] [--job <id>] [--environment <name>] [--package <name>] [--publisher-mode npm-trusted-publisher|github-token|oidc-role] [--npm-trust-json <file-or-json>] [--provider-audit-json <file>] [--output <file>] [--allow-nonqualifying]\n```\n\n### `buildchain audit publication-control-plane`\n\n- Help: `buildchain audit publication-control-plane --help`\n- Canonical id: `audit`\n- Options: `--branch`, `--repository`\n- Syntax:\n\n```text\nbuildchain audit publication-control-plane --repository <owner/repo> --branch <protected-branch>\n```\n\n## `badges`\n\n### `buildchain badges`\n\n- Help: `buildchain badges --help`\n- Canonical id: `badges`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain badges\n```\n\n### `buildchain badges bundle`\n\n- Help: `buildchain badges bundle --help`\n- Canonical id: `badges-bundle`\n- Options: `--check`, `--claims`, `--cwd`, `--json`, `--readme`, `--write`\n- Syntax:\n\n```text\nbuildchain badges bundle [--cwd <dir>] [--readme <path>] [--claims <csv>] [--check] [--write] [--json]\n```\n\n### `buildchain badges readme`\n\n- Help: `buildchain badges readme --help`\n- Canonical id: `badges-readme`\n- Options: `--check`, `--cwd`, `--json`, `--readme`, `--write`\n- Syntax:\n\n```text\nbuildchain badges readme [--cwd <dir>] [--readme <path>] [--check] [--write] [--json]\n```\n\n## `build-contract`\n\n### `buildchain build-contract`\n\n- Help: `buildchain build-contract --help`\n- Canonical id: `build-contract`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain build-contract ...\n```\n\n## `candidate`\n\n### `buildchain candidate`\n\n- Help: `buildchain candidate --help`\n- Canonical id: `candidate`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain candidate\n```\n\n### `buildchain candidate timeline`\n\n- Help: `buildchain candidate timeline --help`\n- Canonical id: `candidate`\n- Options: `--input`, `--json`, `--output`\n- Syntax:\n\n```text\nbuildchain candidate timeline --input <file-or-json> [--output <file>] [--json]\n```\n\n## `collect`\n\n### `buildchain collect`\n\n- Help: `buildchain collect --help`\n- Canonical id: `collect`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain collect\n```\n\n### `buildchain collect github-release`\n\n- Help: `buildchain collect github-release --help`\n- Canonical id: `collect-github-release`\n- Options: `--anchor-manifest-json`, `--assets-dir`, `--assets-json`, `--base-passport-json`, `--build-facts-json`, `--build-summary-json`, `--dist-tag-evidence-json`, `--github-artifact-attestation-policy-json`, `--impact-json`, `--invariant-passport-cmd`, `--invariant-passport-json`, `--json`, `--kfd-1-witness-json`, `--kfd-2-claim-json`, `--kfd-3-artifact-verify-cmd`, `--kfd-3-artifact-witness-json`, `--kfd-3-prebuild-witness-json`, `--kfd-agent-hub-evidence-json`, `--kfd-product-gate-json`, `--kfd-support-matrix-json`, `--output-dir`, `--package-set-json`, `--platform-manifest-json`, `--product-name`, `--publish-evidence-json`, `--publish-json`, `--release-evidence-json`, `--release-extra-json`, `--release-json`, `--repository`, `--require-base-kfd`, `--tag`, `--transaction-json`, `--trusted-publishing-json`\n- Syntax:\n\n```text\nbuildchain collect github-release --tag <tag> [--repository <owner/repo>] [--assets-dir <dir>] [--assets-json <json-or-path>] [--release-json <json-or-path>] [--package-set-json <json-or-path>] [--product-name <name>] [--publish-evidence-json <json-or-path>] [--trusted-publishing-json <json-or-path>] [--transaction-json <json-or-path>] [--anchor-manifest-json <json-or-path>] [--impact-json <json-or-path>] [--build-summary-json <json-or-path>] [--build-facts-json <json-or-path>]... [--platform-manifest-json <json-or-path>]... [--dist-tag-evidence-json <json-or-path>] [--kfd-1-witness-json <json-or-path>]... [--kfd-2-claim-json <json-or-path>]... [--kfd-3-prebuild-witness-json <json-or-path>]... [--kfd-3-artifact-witness-json <json-or-path>]... [--kfd-3-artifact-verify-cmd <command>] [--kfd-support-matrix-json <json-or-path>] [--kfd-product-gate-json <json-or-path>]... [--invariant-passport-json <json-or-path>]... [--invariant-passport-cmd <command>] [--release-evidence-json <json-or-path>]... [--github-artifact-attestation-policy-json <json-or-path>]... [--kfd-agent-hub-evidence-json <json-or-path>] [--base-passport-json <json-or-path>] [--require-base-kfd] [--release-extra-json <json-or-path>] [--publish-json <json-or-path>] [--output-dir <dir>] [--json]\n```\n\n## `create`\n\n### `buildchain create`\n\n- Help: `buildchain create --help`\n- Canonical id: `create`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain create\n```\n\n### `buildchain create github-artifact-attestation-policy`\n\n- Help: `buildchain create github-artifact-attestation-policy --help`\n- Canonical id: `create`\n- Options: `--input-json`, `--json`, `--output`\n- Syntax:\n\n```text\nbuildchain create github-artifact-attestation-policy --input-json <file-or-json> [--output <file>] [--json]\n```\n\n### `buildchain create publication-admission`\n\n- Help: `buildchain create publication-admission --help`\n- Canonical id: `create`\n- Options: `--input-json`, `--json`, `--output`\n- Syntax:\n\n```text\nbuildchain create publication-admission --input-json <file-or-json> [--output <file>] [--json]\n```\n\n### `buildchain create runner-provenance`\n\n- Help: `buildchain create runner-provenance --help`\n- Canonical id: `create`\n- Options: `--input-json`, `--json`, `--output`\n- Syntax:\n\n```text\nbuildchain create runner-provenance --input-json <file-or-json> [--output <file>] [--json]\n```\n\n## `dev`\n\n### `buildchain dev`\n\n- Help: `buildchain dev --help`\n- Canonical id: `dev`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain dev\n```\n\n### `buildchain dev merge-queue`\n\n- Help: `buildchain dev merge-queue --help`\n- Canonical id: `dev`\n- Options: `--apply`, `--branch`, `--check-response-timeout-minutes`, `--cwd`, `--from-config`, `--max-entries-to-build`, `--repository`, `--workflow`\n- Syntax:\n\n```text\nbuildchain dev merge-queue --repository <owner/repo> --branch <dev/vN/vN.M> [--from-config | --workflow <required-workflow.yml>...] [--cwd <dir>] [--check-response-timeout-minutes <n>] [--max-entries-to-build <n>] [--apply]\n```\n\n## `diagnostics`\n\n### `buildchain diagnostics`\n\n- Help: `buildchain diagnostics --help`\n- Canonical id: `diagnostics`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain diagnostics\n```\n\n### `buildchain diagnostics summary`\n\n- Help: `buildchain diagnostics summary --help`\n- Canonical id: `diagnostics-summary`\n- Options: `--artifact`, `--json`, `--output`\n- Syntax:\n\n```text\nbuildchain diagnostics summary <diagnostics.json>... [--artifact <file>]... [--output <file>] [--json]\n```\n\n## `doctor`\n\n### `buildchain doctor`\n\n- Help: `buildchain doctor --help`\n- Canonical id: `doctor`\n- Options: `--cwd`, `--json`, `--require-publish-source-lock`\n- Syntax:\n\n```text\nbuildchain doctor [--cwd <dir>] [--require-publish-source-lock] [--json]\n```\n\n## `explain`\n\n### `buildchain explain`\n\n- Help: `buildchain explain --help`\n- Canonical id: `explain`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain explain\n```\n\n### `buildchain explain artifact`\n\n- Help: `buildchain explain artifact --help`\n- Canonical id: `explain-artifact`\n- Options: `--for`, `--json`, `--npm-registry`, `--passport`\n- Syntax:\n\n```text\nbuildchain explain artifact <subject> [--passport <file-or-url>] [--npm-registry <url>] [--for human|agent] [--json]\n```\n\n### `buildchain explain release`\n\n- Help: `buildchain explain release --help`\n- Canonical id: `explain-release`\n- Options: `--for`, `--json`, `--passport`\n- Syntax:\n\n```text\nbuildchain explain release --passport <file-or-url> [--for human|agent] [--json]\n```\n\n## `facts`\n\n### `buildchain facts`\n\n- Help: `buildchain facts --help`\n- Canonical id: `facts`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain facts\n```\n\n### `buildchain facts aggregate`\n\n- Help: `buildchain facts aggregate --help`\n- Canonical id: `build-facts`\n- Options: `--artifact`, `--cwd`, `--json`, `--module-fact`, `--output`, `--product`\n- Syntax:\n\n```text\nbuildchain facts aggregate [--cwd <dir>] [--product <id>] [--module-fact <file>]... [--artifact <path>]... [--output <file>] [--json]\n```\n\n### `buildchain facts module`\n\n- Help: `buildchain facts module --help`\n- Canonical id: `build-facts`\n- Options: `--cwd`, `--json`, `--legacy-kungfu-buildinfo`, `--module`, `--module-root`, `--output`, `--output-path`, `--version-source`\n- Syntax:\n\n```text\nbuildchain facts module [--cwd <dir>] [--module <id>] [--module-root <path>] [--version-source <id>] [--output <file>] [--output-path <path>]... [--legacy-kungfu-buildinfo <file>] [--json]\n```\n\n### `buildchain facts verify`\n\n- Help: `buildchain facts verify --help`\n- Canonical id: `build-facts`\n- Options: `--cwd`, `--fact`, `--json`\n- Syntax:\n\n```text\nbuildchain facts verify [--cwd <dir>] --fact <file> [--json]\n```\n\n## `github-governance`\n\n### `buildchain github-governance`\n\n- Help: `buildchain github-governance --help`\n- Canonical id: `github-governance`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain github-governance\n```\n\n### `buildchain github-governance apply`\n\n- Help: `buildchain github-governance apply --help`\n- Canonical id: `github-governance`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain github-governance <plan|apply|rollback|protection-policy-plan|ruleset-policy-plan> ...\n```\n\n### `buildchain github-governance plan`\n\n- Help: `buildchain github-governance plan --help`\n- Canonical id: `github-governance`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain github-governance <plan|apply|rollback|protection-policy-plan|ruleset-policy-plan> ...\n```\n\n### `buildchain github-governance protection-policy-plan`\n\n- Help: `buildchain github-governance protection-policy-plan --help`\n- Canonical id: `github-governance`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain github-governance <plan|apply|rollback|protection-policy-plan|ruleset-policy-plan> ...\n```\n\n### `buildchain github-governance rollback`\n\n- Help: `buildchain github-governance rollback --help`\n- Canonical id: `github-governance`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain github-governance <plan|apply|rollback|protection-policy-plan|ruleset-policy-plan> ...\n```\n\n### `buildchain github-governance ruleset-policy-plan`\n\n- Help: `buildchain github-governance ruleset-policy-plan --help`\n- Canonical id: `github-governance`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain github-governance <plan|apply|rollback|protection-policy-plan|ruleset-policy-plan> ...\n```\n\n## `help`\n\n### `buildchain help`\n\n- Help: `buildchain help --help`\n- Canonical id: `help`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain help\n```\n\n## `homebrew`\n\n### `buildchain homebrew`\n\n- Help: `buildchain homebrew --help`\n- Canonical id: `homebrew`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain homebrew\n```\n\n### `buildchain homebrew check`\n\n- Help: `buildchain homebrew check --help`\n- Canonical id: `homebrew-check`\n- Options: `--cwd`, `--json`, `--package`, `--release-passport`\n- Syntax:\n\n```text\nbuildchain homebrew check [--cwd <dir>] [--package <name>] [--release-passport <file-or-url>] [--json]\n```\n\n### `buildchain homebrew update-formula`\n\n- Help: `buildchain homebrew update-formula --help`\n- Canonical id: `homebrew-update-formula`\n- Options: `--json`, `--package`, `--release-passport`, `--write`\n- Syntax:\n\n```text\nbuildchain homebrew update-formula --package <name> --release-passport <file-or-url> [--write] [--json]\n```\n\n## `infra-contract`\n\n### `buildchain infra-contract`\n\n- Help: `buildchain infra-contract --help`\n- Canonical id: `infra-contract`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain infra-contract ...\n```\n\n## `init`\n\n### `buildchain init`\n\n- Help: `buildchain init --help`\n- Canonical id: `init`\n- Options: `--artifact-name`, `--cwd`, `--force`, `--package-manager`, `--runner-preset`, `--type`\n- Syntax:\n\n```text\nbuildchain init [--cwd <dir>] [--type package|native|web-surface|infra-contract|publication-artifact|anchored-package] [--force] [--package-manager pnpm|npm|yarn] [--runner-preset <preset>] [--artifact-name <template>]\n```\n\n## `inspect`\n\n### `buildchain inspect`\n\n- Help: `buildchain inspect --help`\n- Canonical id: `inspect`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain inspect\n```\n\n### `buildchain inspect artifact`\n\n- Help: `buildchain inspect artifact --help`\n- Canonical id: `inspect-artifact`\n- Options: `--json`, `--npm-registry`, `--passport`\n- Syntax:\n\n```text\nbuildchain inspect artifact <subject> [--passport <file-or-url>] [--npm-registry <url>] [--json]\n```\n\n### `buildchain inspect release`\n\n- Help: `buildchain inspect release --help`\n- Canonical id: `inspect-release`\n- Options: `--json`, `--passport`\n- Syntax:\n\n```text\nbuildchain inspect release --passport <file-or-url> [--json]\n```\n\n## `kfd`\n\n### `buildchain kfd`\n\n- Help: `buildchain kfd --help`\n- Canonical id: `kfd`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain kfd ...\n```\n\n### `buildchain kfd 1 gate`\n\n- Help: `buildchain kfd 1 gate --help`\n- Canonical id: `kfd-1-gate`\n- Options: `--artifact-root`, `--cwd`, `--json`, `--output`, `--witness-json`\n- Syntax:\n\n```text\nbuildchain kfd 1 gate --witness-json <file-or-json>... [--cwd <dir>] [--artifact-root <dir>] [--output <file>] [--json]\n```\n\n### `buildchain kfd 1 schema`\n\n- Help: `buildchain kfd 1 schema --help`\n- Canonical id: `kfd-1-schema`\n- Options: `--json`, `--schema`\n- Syntax:\n\n```text\nbuildchain kfd 1 schema [--schema <name>] [--json]\n```\n\n### `buildchain kfd 1 verify`\n\n- Help: `buildchain kfd 1 verify --help`\n- Canonical id: `kfd-1-verify`\n- Options: `--gate-json`, `--json`\n- Syntax:\n\n```text\nbuildchain kfd 1 verify --gate-json <file-or-json> [--json]\n```\n\n### `buildchain kfd 1 witness`\n\n- Help: `buildchain kfd 1 witness --help`\n- Canonical id: `kfd-1-witness`\n- Options: `--cwd`, `--json`, `--output`, `--source-sha`\n- Syntax:\n\n```text\nbuildchain kfd 1 witness [--cwd <dir>] [--source-sha <sha>] [--output <file>] [--json]\n```\n\n### `buildchain kfd 2 claims`\n\n- Help: `buildchain kfd 2 claims --help`\n- Canonical id: `kfd-2-claims`\n- Options: `--cwd`, `--json`, `--output-dir`\n- Syntax:\n\n```text\nbuildchain kfd 2 claims [--cwd <dir>] [--output-dir <dir>] [--json]\n```\n\n### `buildchain kfd 2 product-claims check`\n\n- Help: `buildchain kfd 2 product-claims check --help`\n- Canonical id: `kfd-2-product-claims`\n- Options: `--channel`, `--cwd`, `--json`, `--output-dir`, `--registry`, `--source-sha`, `--tag`, `--version`\n- Syntax:\n\n```text\nbuildchain kfd 2 product-claims <check|write|render> [--cwd <dir>] [--registry <path>] [--output-dir <dir>] [--version <version>] [--channel <channel>] [--tag <tag>] [--source-sha <sha>] [--json]\n```\n\n### `buildchain kfd 2 product-claims render`\n\n- Help: `buildchain kfd 2 product-claims render --help`\n- Canonical id: `kfd-2-product-claims`\n- Options: `--channel`, `--cwd`, `--json`, `--output-dir`, `--registry`, `--source-sha`, `--tag`, `--version`\n- Syntax:\n\n```text\nbuildchain kfd 2 product-claims <check|write|render> [--cwd <dir>] [--registry <path>] [--output-dir <dir>] [--version <version>] [--channel <channel>] [--tag <tag>] [--source-sha <sha>] [--json]\n```\n\n### `buildchain kfd 2 product-claims write`\n\n- Help: `buildchain kfd 2 product-claims write --help`\n- Canonical id: `kfd-2-product-claims`\n- Options: `--channel`, `--cwd`, `--json`, `--output-dir`, `--registry`, `--source-sha`, `--tag`, `--version`\n- Syntax:\n\n```text\nbuildchain kfd 2 product-claims <check|write|render> [--cwd <dir>] [--registry <path>] [--output-dir <dir>] [--version <version>] [--channel <channel>] [--tag <tag>] [--source-sha <sha>] [--json]\n```\n\n### `buildchain kfd 2 schema`\n\n- Help: `buildchain kfd 2 schema --help`\n- Canonical id: `kfd-2-schema`\n- Options: `--json`, `--schema`\n- Syntax:\n\n```text\nbuildchain kfd 2 schema [--schema <name>] [--json]\n```\n\n### `buildchain kfd 2 taxonomy`\n\n- Help: `buildchain kfd 2 taxonomy --help`\n- Canonical id: `kfd-2-taxonomy`\n- Options: `--entry-json`, `--json`, `--kind`\n- Syntax:\n\n```text\nbuildchain kfd 2 taxonomy --entry-json <file-or-json>... [--kind residualRisk|downgradeReason] [--json]\n```\n\n### `buildchain kfd 2 trust-assessment`\n\n- Help: `buildchain kfd 2 trust-assessment --help`\n- Canonical id: `kfd-2-trust-assessment`\n- Options: `--assessment-json`, `--json`\n- Syntax:\n\n```text\nbuildchain kfd 2 trust-assessment [--assessment-json <file-or-json>] [--json]\n```\n\n### `buildchain kfd 2 trust-claims`\n\n- Help: `buildchain kfd 2 trust-claims --help`\n- Canonical id: `kfd-2-trust-claims`\n- Options: `--claims-json`, `--json`\n- Syntax:\n\n```text\nbuildchain kfd 2 trust-claims [--claims-json <file-or-json>] [--json]\n```\n\n### `buildchain kfd 3`\n\n- Help: `buildchain kfd 3 --help`\n- Canonical id: `kfd-3`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain kfd 3 ...\n```\n\n### `buildchain kfd 3 audit`\n\n- Help: `buildchain kfd 3 audit --help`\n- Canonical id: `kfd-3-audit`\n- Options: `--artifact`, `--cwd`, `--json`, `--registry`\n- Syntax:\n\n```text\nbuildchain kfd 3 audit [--cwd <dir>] [--registry <path>] [--artifact <path>] [--json]\n```\n\n### `buildchain kfd 3 detect`\n\n- Help: `buildchain kfd 3 detect --help`\n- Canonical id: `kfd-3-detect`\n- Options: `--artifact`, `--cwd`, `--json`, `--kind`\n- Syntax:\n\n```text\nbuildchain kfd 3 detect [--cwd <dir>] [--kind <kind>]... [--artifact <path>] [--json]\n```\n\n### `buildchain kfd 3 query`\n\n- Help: `buildchain kfd 3 query --help`\n- Canonical id: `kfd-3-query`\n- Options: `--artifact`, `--cwd`, `--json`, `--passport`, `--registry`\n- Syntax:\n\n```text\nbuildchain kfd 3 query [<product>] [--cwd <dir>] [--registry <path>] [--passport <file-or-url>] [--artifact <path>] [--json]\n```\n\n### `buildchain kfd 3 register binary`\n\n- Help: `buildchain kfd 3 register binary --help`\n- Canonical id: `kfd-3-register`\n- Options: `--artifact`, `--cwd`, `--json`, `--product`, `--registry`\n- Syntax:\n\n```text\nbuildchain kfd 3 register <node-api|python-api|cli|binary|documentation|site-bundle> [--cwd <dir>] [--registry <path>] [--artifact <path>] [--product <name>] [--json]\n```\n\n### `buildchain kfd 3 register cli`\n\n- Help: `buildchain kfd 3 register cli --help`\n- Canonical id: `kfd-3-register`\n- Options: `--artifact`, `--cwd`, `--json`, `--product`, `--registry`\n- Syntax:\n\n```text\nbuildchain kfd 3 register <node-api|python-api|cli|binary|documentation|site-bundle> [--cwd <dir>] [--registry <path>] [--artifact <path>] [--product <name>] [--json]\n```\n\n### `buildchain kfd 3 register documentation`\n\n- Help: `buildchain kfd 3 register documentation --help`\n- Canonical id: `kfd-3-register`\n- Options: `--artifact`, `--cwd`, `--json`, `--product`, `--registry`\n- Syntax:\n\n```text\nbuildchain kfd 3 register <node-api|python-api|cli|binary|documentation|site-bundle> [--cwd <dir>] [--registry <path>] [--artifact <path>] [--product <name>] [--json]\n```\n\n### `buildchain kfd 3 register node-api`\n\n- Help: `buildchain kfd 3 register node-api --help`\n- Canonical id: `kfd-3-register`\n- Options: `--artifact`, `--cwd`, `--json`, `--product`, `--registry`\n- Syntax:\n\n```text\nbuildchain kfd 3 register <node-api|python-api|cli|binary|documentation|site-bundle> [--cwd <dir>] [--registry <path>] [--artifact <path>] [--product <name>] [--json]\n```\n\n### `buildchain kfd 3 register python-api`\n\n- Help: `buildchain kfd 3 register python-api --help`\n- Canonical id: `kfd-3-register`\n- Options: `--artifact`, `--cwd`, `--json`, `--product`, `--registry`\n- Syntax:\n\n```text\nbuildchain kfd 3 register <node-api|python-api|cli|binary|documentation|site-bundle> [--cwd <dir>] [--registry <path>] [--artifact <path>] [--product <name>] [--json]\n```\n\n### `buildchain kfd 3 register site-bundle`\n\n- Help: `buildchain kfd 3 register site-bundle --help`\n- Canonical id: `kfd-3-register`\n- Options: `--artifact`, `--cwd`, `--json`, `--product`, `--registry`\n- Syntax:\n\n```text\nbuildchain kfd 3 register <node-api|python-api|cli|binary|documentation|site-bundle> [--cwd <dir>] [--registry <path>] [--artifact <path>] [--product <name>] [--json]\n```\n\n### `buildchain kfd 3 witness`\n\n- Help: `buildchain kfd 3 witness --help`\n- Canonical id: `kfd-3-witness`\n- Options: `--artifact`, `--cwd`, `--json`, `--kind`, `--output`, `--registry`, `--source-sha`\n- Syntax:\n\n```text\nbuildchain kfd 3 witness [--cwd <dir>] [--registry <path>] [--kind prebuild|artifact] [--source-sha <sha>] [--artifact <path>] [--output <file>] [--json]\n```\n\n### `buildchain kfd 4 gate`\n\n- Help: `buildchain kfd 4 gate --help`\n- Canonical id: `kfd-4-gate`\n- Options: `--cwd`, `--input-json`, `--json`, `--output`\n- Syntax:\n\n```text\nbuildchain kfd 4 gate --input-json <file-or-json> [--cwd <dir>] [--output <file>] [--json]\n```\n\n### `buildchain kfd 4 schema`\n\n- Help: `buildchain kfd 4 schema --help`\n- Canonical id: `kfd-4-schema`\n- Options: `--json`, `--schema`\n- Syntax:\n\n```text\nbuildchain kfd 4 schema [--schema <name>] [--json]\n```\n\n### `buildchain kfd 4 verify`\n\n- Help: `buildchain kfd 4 verify --help`\n- Canonical id: `kfd-4-verify`\n- Options: `--expected-source-sha`, `--gate-json`, `--json`\n- Syntax:\n\n```text\nbuildchain kfd 4 verify --gate-json <file-or-json> [--expected-source-sha <sha>] [--json]\n```\n\n### `buildchain kfd 5 gate`\n\n- Help: `buildchain kfd 5 gate --help`\n- Canonical id: `kfd-5-gate`\n- Options: `--cwd`, `--input-json`, `--json`, `--output`\n- Syntax:\n\n```text\nbuildchain kfd 5 gate --input-json <file-or-json> [--cwd <dir>] [--output <file>] [--json]\n```\n\n### `buildchain kfd 5 schema`\n\n- Help: `buildchain kfd 5 schema --help`\n- Canonical id: `kfd-5-schema`\n- Options: `--json`, `--schema`\n- Syntax:\n\n```text\nbuildchain kfd 5 schema [--schema <name>] [--json]\n```\n\n### `buildchain kfd 5 verify`\n\n- Help: `buildchain kfd 5 verify --help`\n- Canonical id: `kfd-5-verify`\n- Options: `--expected-source-sha`, `--gate-json`, `--json`\n- Syntax:\n\n```text\nbuildchain kfd 5 verify --gate-json <file-or-json> [--expected-source-sha <sha>] [--json]\n```\n\n### `buildchain kfd 7 gate`\n\n- Help: `buildchain kfd 7 gate --help`\n- Canonical id: `kfd-7-gate`\n- Options: `--cwd`, `--input-json`, `--json`, `--output`\n- Syntax:\n\n```text\nbuildchain kfd 7 gate --input-json <file-or-json> [--cwd <dir>] [--output <file>] [--json]\n```\n\n### `buildchain kfd 7 schema`\n\n- Help: `buildchain kfd 7 schema --help`\n- Canonical id: `kfd-7-schema`\n- Options: `--json`, `--schema`\n- Syntax:\n\n```text\nbuildchain kfd 7 schema [--schema <name>] [--json]\n```\n\n### `buildchain kfd 7 verify`\n\n- Help: `buildchain kfd 7 verify --help`\n- Canonical id: `kfd-7-verify`\n- Options: `--expected-source-sha`, `--gate-json`, `--json`\n- Syntax:\n\n```text\nbuildchain kfd 7 verify --gate-json <file-or-json> [--expected-source-sha <sha>] [--json]\n```\n\n### `buildchain kfd aggregate`\n\n- Help: `buildchain kfd aggregate --help`\n- Canonical id: `kfd-aggregate`\n- Options: `--cwd`, `--json`\n- Syntax:\n\n```text\nbuildchain kfd aggregate [--cwd <dir>] [--json]\n```\n\n### `buildchain kfd hub explain`\n\n- Help: `buildchain kfd hub explain --help`\n- Canonical id: `kfd-hub`\n- Options: `--cwd`, `--declaration`, `--for`, `--force`, `--json`, `--output-dir`, `--write`\n- Syntax:\n\n```text\nbuildchain kfd hub <init|inspect|test|explain> [--cwd <dir>] [--declaration <path>] [--output-dir <path>] [--write] [--force] [--for agent] [--json]\n```\n\n### `buildchain kfd hub init`\n\n- Help: `buildchain kfd hub init --help`\n- Canonical id: `kfd-hub`\n- Options: `--cwd`, `--declaration`, `--for`, `--force`, `--json`, `--output-dir`, `--write`\n- Syntax:\n\n```text\nbuildchain kfd hub <init|inspect|test|explain> [--cwd <dir>] [--declaration <path>] [--output-dir <path>] [--write] [--force] [--for agent] [--json]\n```\n\n### `buildchain kfd hub inspect`\n\n- Help: `buildchain kfd hub inspect --help`\n- Canonical id: `kfd-hub`\n- Options: `--cwd`, `--declaration`, `--for`, `--force`, `--json`, `--output-dir`, `--write`\n- Syntax:\n\n```text\nbuildchain kfd hub <init|inspect|test|explain> [--cwd <dir>] [--declaration <path>] [--output-dir <path>] [--write] [--force] [--for agent] [--json]\n```\n\n### `buildchain kfd hub test`\n\n- Help: `buildchain kfd hub test --help`\n- Canonical id: `kfd-hub`\n- Options: `--cwd`, `--declaration`, `--for`, `--force`, `--json`, `--output-dir`, `--write`\n- Syntax:\n\n```text\nbuildchain kfd hub <init|inspect|test|explain> [--cwd <dir>] [--declaration <path>] [--output-dir <path>] [--write] [--force] [--for agent] [--json]\n```\n\n### `buildchain kfd migrate-layout`\n\n- Help: `buildchain kfd migrate-layout --help`\n- Canonical id: `kfd-migrate-layout`\n- Options: `--cwd`, `--force`, `--json`, `--write`\n- Syntax:\n\n```text\nbuildchain kfd migrate-layout [--cwd <dir>] [--write] [--force] [--json]\n```\n\n### `buildchain kfd schema list`\n\n- Help: `buildchain kfd schema list --help`\n- Canonical id: `kfd-schema-list`\n- Options: `--json`, `--standard`\n- Syntax:\n\n```text\nbuildchain kfd schema list [--standard kfd-1|kfd-2|kfd-3|kfd-4] [--json]\n```\n\n### `buildchain kfd schema show kfd-1`\n\n- Help: `buildchain kfd schema show kfd-1 --help`\n- Canonical id: `kfd-schema-show`\n- Options: `--json`, `--schema`\n- Syntax:\n\n```text\nbuildchain kfd schema show <kfd-1|kfd-2|kfd-3|kfd-4> [--schema <name>] [--json]\n```\n\n### `buildchain kfd schema show kfd-2`\n\n- Help: `buildchain kfd schema show kfd-2 --help`\n- Canonical id: `kfd-schema-show`\n- Options: `--json`, `--schema`\n- Syntax:\n\n```text\nbuildchain kfd schema show <kfd-1|kfd-2|kfd-3|kfd-4> [--schema <name>] [--json]\n```\n\n### `buildchain kfd schema show kfd-3`\n\n- Help: `buildchain kfd schema show kfd-3 --help`\n- Canonical id: `kfd-schema-show`\n- Options: `--json`, `--schema`\n- Syntax:\n\n```text\nbuildchain kfd schema show <kfd-1|kfd-2|kfd-3|kfd-4> [--schema <name>] [--json]\n```\n\n### `buildchain kfd schema show kfd-4`\n\n- Help: `buildchain kfd schema show kfd-4 --help`\n- Canonical id: `kfd-schema-show`\n- Options: `--json`, `--schema`\n- Syntax:\n\n```text\nbuildchain kfd schema show <kfd-1|kfd-2|kfd-3|kfd-4> [--schema <name>] [--json]\n```\n\n### `buildchain kfd status`\n\n- Help: `buildchain kfd status --help`\n- Canonical id: `kfd-status`\n- Options: `--cwd`, `--json`\n- Syntax:\n\n```text\nbuildchain kfd status [--cwd <dir>] [--json]\n```\n\n### `buildchain kfd support project`\n\n- Help: `buildchain kfd support project --help`\n- Canonical id: `kfd-support`\n- Options: `--checked-at`, `--expected-source-sha`, `--gate-json`, `--json`, `--matrix-json`, `--output`\n- Syntax:\n\n```text\nbuildchain kfd support project --matrix-json <file-or-json> --gate-json <file-or-json>... [--expected-source-sha <sha>] [--checked-at <date-time>] [--output <file>] [--json]\n```\n\n### `buildchain kfd support verify`\n\n- Help: `buildchain kfd support verify --help`\n- Canonical id: `kfd-support`\n- Options: `--checked-at`, `--expected-source-sha`, `--json`, `--projection-json`\n- Syntax:\n\n```text\nbuildchain kfd support verify --projection-json <file-or-json> [--expected-source-sha <sha>] [--checked-at <date-time>] [--json]\n```\n\n### `buildchain kfd upstream check`\n\n- Help: `buildchain kfd upstream check --help`\n- Canonical id: `kfd-upstream-check`\n- Options: `--aggregate-json`, `--cwd`, `--json`\n- Syntax:\n\n```text\nbuildchain kfd upstream check [--cwd <dir>] [--aggregate-json <file-or-json>] [--json]\n```\n\n### `buildchain kfd upstream collect`\n\n- Help: `buildchain kfd upstream collect --help`\n- Canonical id: `kfd-upstream-collect`\n- Options: `--cwd`, `--json`, `--output`\n- Syntax:\n\n```text\nbuildchain kfd upstream collect [--cwd <dir>] [--output <file>] [--json]\n```\n\n### `buildchain kfd upstream roles`\n\n- Help: `buildchain kfd upstream roles --help`\n- Canonical id: `kfd-upstream-roles`\n- Options: `--json`\n- Syntax:\n\n```text\nbuildchain kfd upstream roles [--json]\n```\n\n## `layout`\n\n### `buildchain layout`\n\n- Help: `buildchain layout --help`\n- Canonical id: `layout`\n- Options: `--cwd`, `--json`\n- Syntax:\n\n```text\nbuildchain layout [--cwd <dir>] [--json]\n```\n\n## `lifecycle`\n\n### `buildchain lifecycle`\n\n- Help: `buildchain lifecycle --help`\n- Canonical id: `lifecycle`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain lifecycle\n```\n\n### `buildchain lifecycle run`\n\n- Help: `buildchain lifecycle run --help`\n- Canonical id: `lifecycle`\n- Options: `--artifact-name`, `--artifact-path`, `--cwd`, `--manifest-path`, `--process-summary`, `--required`, `--summary-path`\n- Syntax:\n\n```text\nbuildchain lifecycle run <stage> [--cwd <dir>] [--required] [--artifact-name <name>] [--artifact-path <path>]... [--manifest-path <path>] [--summary-path <path>] [--process-summary <json>]\n```\n\n## `log`\n\n### `buildchain log`\n\n- Help: `buildchain log --help`\n- Canonical id: `log`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain log\n```\n\n### `buildchain log error`\n\n- Help: `buildchain log error --help`\n- Canonical id: `logging`\n- Options: `--attribute`, `--component`, `--event`, `--json`, `--path`, `--phase`, `--source`\n- Syntax:\n\n```text\nbuildchain log <info|warn|error> --event <name> [--phase <phase>] [--component <name>] [--source <name>] [--attribute key=value]... [--path <jsonl>] [--json]\n```\n\n### `buildchain log info`\n\n- Help: `buildchain log info --help`\n- Canonical id: `logging`\n- Options: `--attribute`, `--component`, `--event`, `--json`, `--path`, `--phase`, `--source`\n- Syntax:\n\n```text\nbuildchain log <info|warn|error> --event <name> [--phase <phase>] [--component <name>] [--source <name>] [--attribute key=value]... [--path <jsonl>] [--json]\n```\n\n### `buildchain log summary`\n\n- Help: `buildchain log summary --help`\n- Canonical id: `logging`\n- Options: `--json`, `--path`\n- Syntax:\n\n```text\nbuildchain log summary [--path <jsonl>] [--json]\n```\n\n### `buildchain log warn`\n\n- Help: `buildchain log warn --help`\n- Canonical id: `logging`\n- Options: `--attribute`, `--component`, `--event`, `--json`, `--path`, `--phase`, `--source`\n- Syntax:\n\n```text\nbuildchain log <info|warn|error> --event <name> [--phase <phase>] [--component <name>] [--source <name>] [--attribute key=value]... [--path <jsonl>] [--json]\n```\n\n## `mark`\n\n### `buildchain mark`\n\n- Help: `buildchain mark --help`\n- Canonical id: `mark`\n- Options: `--attribute`, `--component`, `--event`, `--json`, `--path`, `--phase`\n- Syntax:\n\n```text\nbuildchain mark --event <name> [--phase <phase>] [--component <name>] [--attribute key=value]... [--path <jsonl>] [--json]\n```\n\n## `npm`\n\n### `buildchain npm`\n\n- Help: `buildchain npm --help`\n- Canonical id: `npm`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain npm\n```\n\n### `buildchain npm dry-run`\n\n- Help: `buildchain npm dry-run --help`\n- Canonical id: `npm-dry-run`\n- Options: `--cwd`, `--dist-tag`, `--expected-tag`, `--json`, `--registry`, `--skip-npm-publish-dry-run`\n- Syntax:\n\n```text\nbuildchain npm dry-run [--cwd <dir>] [--expected-tag <tag>] [--registry <url>] [--dist-tag <tag>] [--skip-npm-publish-dry-run] [--json]\n```\n\n## `paper`\n\n### `buildchain paper`\n\n- Help: `buildchain paper --help`\n- Canonical id: `paper`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain paper\n```\n\n### `buildchain paper agent verify`\n\n- Help: `buildchain paper agent verify --help`\n- Canonical id: `paper-agent`\n- Options: `--cwd`, `--json`, `--offline`\n- Syntax:\n\n```text\nbuildchain paper agent verify [--cwd <dir>] [--offline] [--json]\n```\n\n### `buildchain paper alpha`\n\n- Help: `buildchain paper alpha --help`\n- Canonical id: `paper-alpha`\n- Options: `--cwd`, `--execute`, `--json`, `--source-ref`, `--target-ref`\n- Syntax:\n\n```text\nbuildchain paper alpha [--cwd <dir>] [--source-ref <ref>] [--target-ref <ref>] [--execute] [--json]\n```\n\n### `buildchain paper bootstrap npm`\n\n- Help: `buildchain paper bootstrap npm --help`\n- Canonical id: `paper-bootstrap-npm`\n- Options: `--confirm-public-package`, `--cwd`, `--execute`, `--json`\n- Syntax:\n\n```text\nbuildchain paper bootstrap npm [--cwd <dir>] [--execute] [--confirm-public-package <name>] [--json]\n```\n\n### `buildchain paper build`\n\n- Help: `buildchain paper build --help`\n- Canonical id: `paper-build`\n- Options: `--cwd`, `--execute`, `--json`\n- Syntax:\n\n```text\nbuildchain paper build [--cwd <dir>] [--execute] [--json]\n```\n\n### `buildchain paper fleet audit`\n\n- Help: `buildchain paper fleet audit --help`\n- Canonical id: `paper-fleet-audit`\n- Options: `--json`, `--offline`, `--root`\n- Syntax:\n\n```text\nbuildchain paper fleet audit [--root <dir>] [--offline] [--json]\n```\n\n### `buildchain paper fleet update`\n\n- Help: `buildchain paper fleet update --help`\n- Canonical id: `paper-fleet-update`\n- Options: `--json`, `--root`, `--write`\n- Syntax:\n\n```text\nbuildchain paper fleet update [--root <dir>] [--write] [--json]\n```\n\n### `buildchain paper migrate`\n\n- Help: `buildchain paper migrate --help`\n- Canonical id: `paper-migrate`\n- Options: `--cwd`, `--json`, `--write`\n- Syntax:\n\n```text\nbuildchain paper migrate [--cwd <dir>] [--write] [--json]\n```\n\n### `buildchain paper preflight`\n\n- Help: `buildchain paper preflight --help`\n- Canonical id: `paper-preflight`\n- Options: `--cwd`, `--json`, `--offline`\n- Syntax:\n\n```text\nbuildchain paper preflight [--cwd <dir>] [--offline] [--json]\n```\n\n### `buildchain paper resume`\n\n- Help: `buildchain paper resume --help`\n- Canonical id: `paper-resume`\n- Options: `--buildchain-ref`, `--cwd`, `--execute`, `--json`\n- Syntax:\n\n```text\nbuildchain paper resume [--cwd <dir>] [--buildchain-ref <ref>] [--execute] [--json]\n```\n\n### `buildchain paper scaffold`\n\n- Help: `buildchain paper scaffold --help`\n- Canonical id: `paper-scaffold`\n- Options: `--json`, `--package`, `--repository`, `--write`\n- Syntax:\n\n```text\nbuildchain paper scaffold --package <name> --repository <owner/repo> [--write] [--json]\n```\n\n### `buildchain paper status`\n\n- Help: `buildchain paper status --help`\n- Canonical id: `paper-status`\n- Options: `--cwd`, `--json`\n- Syntax:\n\n```text\nbuildchain paper status [--cwd <dir>] [--json]\n```\n\n### `buildchain paper work start`\n\n- Help: `buildchain paper work start --help`\n- Canonical id: `paper-work-start`\n- Options: `--branch`, `--cwd`, `--execute`, `--json`\n- Syntax:\n\n```text\nbuildchain paper work start <topic> [--cwd <dir>] [--branch <branch>] [--execute] [--json]\n```\n\n### `buildchain paper work submit`\n\n- Help: `buildchain paper work submit --help`\n- Canonical id: `paper-work-submit`\n- Options: `--body`, `--cwd`, `--execute`, `--json`, `--title`\n- Syntax:\n\n```text\nbuildchain paper work submit [--cwd <dir>] [--title <title>] [--body <body>] [--execute] [--json]\n```\n\n## `portable-cache`\n\n### `buildchain portable-cache`\n\n- Help: `buildchain portable-cache --help`\n- Canonical id: `portable-cache`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain portable-cache\n```\n\n### `buildchain portable-cache plan`\n\n- Help: `buildchain portable-cache plan --help`\n- Canonical id: `portable-cache`\n- Options: `--github-output`, `--json`, `--manifest`, `--output`\n- Syntax:\n\n```text\nbuildchain portable-cache plan --manifest <file-or-json> [--output <file>] [--github-output <file>] [--json]\n```\n\n### `buildchain portable-cache receipt`\n\n- Help: `buildchain portable-cache receipt --help`\n- Canonical id: `portable-cache`\n- Options: `--cache-hit`, `--cold-fallback-status`, `--json`, `--matched-key`, `--output`, `--plan`, `--validation-reason`, `--validation-status`\n- Syntax:\n\n```text\nbuildchain portable-cache receipt --plan <file-or-json> [--matched-key <key>] [--cache-hit true|false] [--validation-status pass|fail] [--validation-reason <text>] [--cold-fallback-status not-run|passed|failed] [--output <file>] [--json]\n```\n\n## `project`\n\n### `buildchain project`\n\n- Help: `buildchain project --help`\n- Canonical id: `project`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain project\n```\n\n### `buildchain project kfx-admission`\n\n- Help: `buildchain project kfx-admission --help`\n- Canonical id: `project`\n- Options: `--assessment-time`, `--expected-contract`, `--expected-issuer`, `--expected-publisher`, `--expected-root`, `--json`\n- Syntax:\n\n```text\nbuildchain project kfx-admission <file-or-json> [--assessment-time <epoch>] [--expected-root <sha256:...>] [--expected-issuer <issuer>] [--expected-publisher <publisher>] [--expected-contract <version>] [--json]\n```\n\n## `publication-artifact`\n\n### `buildchain publication-artifact`\n\n- Help: `buildchain publication-artifact --help`\n- Canonical id: `publication-artifact`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain publication-artifact\n```\n\n### `buildchain publication-artifact manifest`\n\n- Help: `buildchain publication-artifact manifest --help`\n- Canonical id: `publication-artifact-manifest`\n- Options: `--cwd`, `--json`, `--no-source-bundle`, `--output`, `--passport-output`, `--registry-output`, `--source-bundle`, `--source-sha`\n- Syntax:\n\n```text\nbuildchain publication-artifact manifest [--cwd <dir>] [--source-sha <sha>] [--output <file>] [--passport-output <file>] [--registry-output <file>] [--source-bundle <file>] [--no-source-bundle] [--json]\n```\n\n### `buildchain publication-artifact npm-package`\n\n- Help: `buildchain publication-artifact npm-package --help`\n- Canonical id: `publication-artifact-npm-package`\n- Options: `--cwd`, `--json`, `--output-dir`, `--package-name`\n- Syntax:\n\n```text\nbuildchain publication-artifact npm-package [--cwd <dir>] [--output-dir <dir>] [--package-name <name>] [--json]\n```\n\n### `buildchain publication-artifact reproducibility`\n\n- Help: `buildchain publication-artifact reproducibility --help`\n- Canonical id: `publication-artifact-reproducibility`\n- Options: `--allow-unpinned-toolchain`, `--cwd`, `--json`, `--no-toolchain-pull`, `--output`, `--promote`, `--source-sha`\n- Syntax:\n\n```text\nbuildchain publication-artifact reproducibility [--cwd <dir>] [--source-sha <sha>] [--output <file>] [--promote] [--no-toolchain-pull] [--allow-unpinned-toolchain] [--json]\n```\n\n## `publish-source`\n\n### `buildchain publish-source`\n\n- Help: `buildchain publish-source --help`\n- Canonical id: `publish-source`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain publish-source\n```\n\n### `buildchain publish-source lock`\n\n- Help: `buildchain publish-source lock --help`\n- Canonical id: `publish-source`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain publish-source <lock|manifest|verify-lock|verify-channel-ref|validate-anchored-release> ...\n```\n\n### `buildchain publish-source manifest`\n\n- Help: `buildchain publish-source manifest --help`\n- Canonical id: `publish-source`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain publish-source <lock|manifest|verify-lock|verify-channel-ref|validate-anchored-release> ...\n```\n\n### `buildchain publish-source validate-anchored-release`\n\n- Help: `buildchain publish-source validate-anchored-release --help`\n- Canonical id: `publish-source`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain publish-source <lock|manifest|verify-lock|verify-channel-ref|validate-anchored-release> ...\n```\n\n### `buildchain publish-source verify-channel-ref`\n\n- Help: `buildchain publish-source verify-channel-ref --help`\n- Canonical id: `publish-source`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain publish-source <lock|manifest|verify-lock|verify-channel-ref|validate-anchored-release> ...\n```\n\n### `buildchain publish-source verify-lock`\n\n- Help: `buildchain publish-source verify-lock --help`\n- Canonical id: `publish-source`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain publish-source <lock|manifest|verify-lock|verify-channel-ref|validate-anchored-release> ...\n```\n\n## `release`\n\n### `buildchain release`\n\n- Help: `buildchain release --help`\n- Canonical id: `release-transaction`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain release\n```\n\n### `buildchain release --dry-run`\n\n- Help: `buildchain release --dry-run --help`\n- Canonical id: `release-dry-run`\n- Options: `--dry-run`, `--json`, `--sha`, `--source-ref`, `--tags`, `--target-ref`\n- Syntax:\n\n```text\nbuildchain release --dry-run --target-ref <ref> [--sha <sha>] [--source-ref <ref>] [--tags <comma-list>] [--json]\n```\n\n### `buildchain release abort`\n\n- Help: `buildchain release abort --help`\n- Canonical id: `release-transaction`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain release <inspect|recover|finalize|abort> ...\n```\n\n### `buildchain release dry-run`\n\n- Help: `buildchain release dry-run --help`\n- Canonical id: `release-dry-run`\n- Options: `--json`, `--sha`, `--source-ref`, `--tags`, `--target-ref`\n- Syntax:\n\n```text\nbuildchain release dry-run --target-ref <ref> [--sha <sha>] [--source-ref <ref>] [--tags <comma-list>] [--json]\n```\n\n### `buildchain release explain`\n\n- Help: `buildchain release explain --help`\n- Canonical id: `release-dry-run`\n- Options: `--json`, `--sha`, `--source-ref`, `--tags`, `--target-ref`\n- Syntax:\n\n```text\nbuildchain release explain --target-ref <ref> [--sha <sha>] [--source-ref <ref>] [--tags <comma-list>] [--json]\n```\n\n### `buildchain release finalize`\n\n- Help: `buildchain release finalize --help`\n- Canonical id: `release-transaction`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain release <inspect|recover|finalize|abort> ...\n```\n\n### `buildchain release inspect`\n\n- Help: `buildchain release inspect --help`\n- Canonical id: `release-transaction`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain release <inspect|recover|finalize|abort> ...\n```\n\n### `buildchain release line open`\n\n- Help: `buildchain release line open --help`\n- Canonical id: `release-line-open`\n- Options: `--initial-version`, `--json`, `--major`, `--minor`, `--source-ref`, `--write`\n- Syntax:\n\n```text\nbuildchain release line open --major <n> --minor <n> [--source-ref <ref>] [--initial-version <version>] [--write] [--json]\n```\n\n### `buildchain release recover`\n\n- Help: `buildchain release recover --help`\n- Canonical id: `release-transaction`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain release <inspect|recover|finalize|abort> ...\n```\n\n## `release-governance`\n\n### `buildchain release-governance`\n\n- Help: `buildchain release-governance --help`\n- Canonical id: `release-governance`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain release-governance\n```\n\n### `buildchain release-governance reconcile`\n\n- Help: `buildchain release-governance reconcile --help`\n- Canonical id: `release-governance`\n- Options: `--apply`, `--branch`, `--candidate-sha`, `--json`, `--repository`\n- Syntax:\n\n```text\nbuildchain release-governance reconcile --repository <owner/repo> --branch <dev|alpha|release/vN/vN.N> --candidate-sha <sha> [--apply] [--json]\n```\n\n## `release-propagation`\n\n### `buildchain release-propagation`\n\n- Help: `buildchain release-propagation --help`\n- Canonical id: `release-propagation`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain release-propagation\n```\n\n### `buildchain release-propagation pickup`\n\n- Help: `buildchain release-propagation pickup --help`\n- Canonical id: `release-propagation`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain release-propagation <plan|write-lock|work|pickup> ...\n```\n\n### `buildchain release-propagation plan`\n\n- Help: `buildchain release-propagation plan --help`\n- Canonical id: `release-propagation`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain release-propagation <plan|write-lock|work|pickup> ...\n```\n\n### `buildchain release-propagation work`\n\n- Help: `buildchain release-propagation work --help`\n- Canonical id: `release-propagation`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain release-propagation <plan|write-lock|work|pickup> ...\n```\n\n### `buildchain release-propagation write-lock`\n\n- Help: `buildchain release-propagation write-lock --help`\n- Canonical id: `release-propagation`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain release-propagation <plan|write-lock|work|pickup> ...\n```\n\n## `sample`\n\n### `buildchain sample`\n\n- Help: `buildchain sample --help`\n- Canonical id: `sample`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain sample\n```\n\n### `buildchain sample process-tree`\n\n- Help: `buildchain sample process-tree --help`\n- Canonical id: `sample-process-tree`\n- Options: `--interval-ms`, `--json`, `--label`, `--output`, `--requested-parallelism`, `--summary-output`\n- Syntax:\n\n```text\nbuildchain sample process-tree [--interval-ms <n>] [--label <name>] [--output <jsonl>] [--summary-output <json>] [--requested-parallelism <n>] [--json] -- <command> [args...]\n```\n\n## `span`\n\n### `buildchain span`\n\n- Help: `buildchain span --help`\n- Canonical id: `span`\n- Options: `--component`, `--event`, `--path`, `--phase`\n- Syntax:\n\n```text\nbuildchain span --event <name> [--phase <phase>] [--component <name>] [--path <jsonl>] -- <command> [args...]\n```\n\n## `transaction`\n\n### `buildchain transaction`\n\n- Help: `buildchain transaction --help`\n- Canonical id: `transaction-inspect`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain transaction\n```\n\n### `buildchain transaction inspect`\n\n- Help: `buildchain transaction inspect --help`\n- Canonical id: `transaction-inspect`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain transaction inspect ...\n```\n\n## `validate`\n\n### `buildchain validate`\n\n- Help: `buildchain validate --help`\n- Canonical id: `validate`\n- Options: `--cwd`, `--require-lifecycle-stages`, `--require-version-state`\n- Syntax:\n\n```text\nbuildchain validate [--cwd <dir>] [--require-version-state] [--require-lifecycle-stages <comma-list>]\n```\n\n## `verify`\n\n### `buildchain verify`\n\n- Help: `buildchain verify --help`\n- Canonical id: `verify`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain verify\n```\n\n### `buildchain verify artifact dir`\n\n- Help: `buildchain verify artifact dir --help`\n- Canonical id: `verify-artifact`\n- Options: `--json`, `--locator-config`, `--npm-registry`, `--passport`, `--repository`, `--tag`\n- Syntax:\n\n```text\nbuildchain verify artifact <file|dir|url|npm:...|oci:...|github-release:...> [--passport <file-or-url>] [--locator-config <json>] [--repository <owner/repo>] [--tag <tag>] [--npm-registry <url>] [--json]\n```\n\n### `buildchain verify artifact file`\n\n- Help: `buildchain verify artifact file --help`\n- Canonical id: `verify-artifact`\n- Options: `--json`, `--locator-config`, `--npm-registry`, `--passport`, `--repository`, `--tag`\n- Syntax:\n\n```text\nbuildchain verify artifact <file|dir|url|npm:...|oci:...|github-release:...> [--passport <file-or-url>] [--locator-config <json>] [--repository <owner/repo>] [--tag <tag>] [--npm-registry <url>] [--json]\n```\n\n### `buildchain verify artifact github-release:...`\n\n- Help: `buildchain verify artifact github-release:... --help`\n- Canonical id: `verify-artifact`\n- Options: `--json`, `--locator-config`, `--npm-registry`, `--passport`, `--repository`, `--tag`\n- Syntax:\n\n```text\nbuildchain verify artifact <file|dir|url|npm:...|oci:...|github-release:...> [--passport <file-or-url>] [--locator-config <json>] [--repository <owner/repo>] [--tag <tag>] [--npm-registry <url>] [--json]\n```\n\n### `buildchain verify artifact npm:...`\n\n- Help: `buildchain verify artifact npm:... --help`\n- Canonical id: `verify-artifact`\n- Options: `--json`, `--locator-config`, `--npm-registry`, `--passport`, `--repository`, `--tag`\n- Syntax:\n\n```text\nbuildchain verify artifact <file|dir|url|npm:...|oci:...|github-release:...> [--passport <file-or-url>] [--locator-config <json>] [--repository <owner/repo>] [--tag <tag>] [--npm-registry <url>] [--json]\n```\n\n### `buildchain verify artifact oci:...`\n\n- Help: `buildchain verify artifact oci:... --help`\n- Canonical id: `verify-artifact`\n- Options: `--json`, `--locator-config`, `--npm-registry`, `--passport`, `--repository`, `--tag`\n- Syntax:\n\n```text\nbuildchain verify artifact <file|dir|url|npm:...|oci:...|github-release:...> [--passport <file-or-url>] [--locator-config <json>] [--repository <owner/repo>] [--tag <tag>] [--npm-registry <url>] [--json]\n```\n\n### `buildchain verify artifact url`\n\n- Help: `buildchain verify artifact url --help`\n- Canonical id: `verify-artifact`\n- Options: `--json`, `--locator-config`, `--npm-registry`, `--passport`, `--repository`, `--tag`\n- Syntax:\n\n```text\nbuildchain verify artifact <file|dir|url|npm:...|oci:...|github-release:...> [--passport <file-or-url>] [--locator-config <json>] [--repository <owner/repo>] [--tag <tag>] [--npm-registry <url>] [--json]\n```\n\n### `buildchain verify artifact-envelope`\n\n- Help: `buildchain verify artifact-envelope --help`\n- Canonical id: `verify-artifact-envelope`\n- Options: `--assessment-time`, `--expected-contract`, `--expected-issuer`, `--expected-publisher`, `--expected-root`, `--json`\n- Syntax:\n\n```text\nbuildchain verify artifact-envelope <file-or-json> [--assessment-time <epoch>] [--expected-root <sha256:...>] [--expected-issuer <issuer>] [--expected-publisher <publisher>] [--expected-contract <version>] [--json]\n```\n\n### `buildchain verify github-artifact-attestation`\n\n- Help: `buildchain verify github-artifact-attestation --help`\n- Canonical id: `verify-github-artifact-attestation`\n- Options: `--bundle`, `--evidence`, `--json`, `--platform-manifest`, `--release-passport`\n- Syntax:\n\n```text\nbuildchain verify github-artifact-attestation <artifact> --evidence <file> --bundle <file> --platform-manifest <file> --release-passport <file> [--json]\n```\n\n### `buildchain verify infra-contract-evidence-bundle`\n\n- Help: `buildchain verify infra-contract-evidence-bundle --help`\n- Canonical id: `verify-infra-contract-evidence-bundle`\n- Options: `--json`\n- Syntax:\n\n```text\nbuildchain verify infra-contract-evidence-bundle <file> [--json]\n```\n\n### `buildchain verify observability-log`\n\n- Help: `buildchain verify observability-log --help`\n- Canonical id: `verify-observability-log`\n- Options: `--allow-errors`, `--json`, `--min-events`, `--require-component`, `--require-event`, `--require-phase`\n- Syntax:\n\n```text\nbuildchain verify observability-log <jsonl> [--min-events <n>] [--require-phase <csv>] [--require-component <csv>] [--require-event <csv>] [--allow-errors] [--json]\n```\n\n### `buildchain verify publication-admission`\n\n- Help: `buildchain verify publication-admission --help`\n- Canonical id: `verify-publication-admission`\n- Options: `--control-plane-audit-json`, `--expected-json`, `--json`, `--publication-evidence-json`, `--registry-json`, `--runner-json`, `--used-nonce`\n- Syntax:\n\n```text\nbuildchain verify publication-admission <file-or-json> --registry-json <file-or-json> --runner-json <file-or-json> --control-plane-audit-json <file-or-json> --publication-evidence-json <file-or-json> [--expected-json <file-or-json>] [--used-nonce <nonce>]... [--json]\n```\n\n### `buildchain verify release-passport`\n\n- Help: `buildchain verify release-passport --help`\n- Canonical id: `verify-release-passport`\n- Options: `--json`\n- Syntax:\n\n```text\nbuildchain verify release-passport <file-or-url> [--json]\n```\n\n## `version`\n\n### `buildchain version`\n\n- Help: `buildchain version --help`\n- Canonical id: `version`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain version\n```\n\n## `web-surface`\n\n### `buildchain web-surface`\n\n- Help: `buildchain web-surface --help`\n- Canonical id: `web-surface`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain web-surface ...\n```"
+      "markdown": "---\nstatus: active\nperiod: ongoing\ntheme: buildchain-generated-reference\ndoc_type: technical-reference\nsource_level: local-files\nconfidence: high\nsensitivity: public\nevidence_grade: A\nreview_state: generated\nlast_reviewed: 2026-08-01\nai_provenance:\n  model_family: GPT-5\n  product: Codex\n  generated_at: 2026-08-01\n  invisible_context: not asserted\n---\n\n# Buildchain CLI Reference\n\n> Generated from `BUILDCHAIN_USAGE` and the runtime command registry. Do not edit this file by hand.\n\nEvery listed help command is intercepted before dispatch, exits zero, and performs no command side effects.\n\n## `audit`\n\n### `buildchain audit`\n\n- Help: `buildchain audit --help`\n- Canonical id: `audit`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain audit\n```\n\n### `buildchain audit github-governance`\n\n- Help: `buildchain audit github-governance --help`\n- Canonical id: `audit`\n- Options: `--allow-nonqualifying`, `--environment`, `--job`, `--json`, `--npm-trust-json`, `--organization`, `--output`, `--package`, `--provider-audit-json`, `--publisher-mode`, `--repository`, `--require-qualifying`, `--source-sha`, `--workflow`, `--workflow-ref`, `--workflow-repository`\n- Syntax:\n\n```text\nbuildchain audit github-governance [--organization <owner>] [--repository <owner/repo>] [--output <file>] [--require-qualifying] [--json] [--source-sha <merged-branch-sha>] [--workflow-repository <owner/repo>] [--workflow <path>] [--workflow-ref <sha-or-ref>] [--job <id>] [--environment <name>] [--package <name>] [--publisher-mode npm-trusted-publisher|github-token|oidc-role] [--npm-trust-json <file-or-json>] [--provider-audit-json <file>] [--output <file>] [--allow-nonqualifying]\n```\n\n### `buildchain audit publication-control-plane`\n\n- Help: `buildchain audit publication-control-plane --help`\n- Canonical id: `audit`\n- Options: `--branch`, `--repository`\n- Syntax:\n\n```text\nbuildchain audit publication-control-plane --repository <owner/repo> --branch <protected-branch>\n```\n\n## `badges`\n\n### `buildchain badges`\n\n- Help: `buildchain badges --help`\n- Canonical id: `badges`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain badges\n```\n\n### `buildchain badges bundle`\n\n- Help: `buildchain badges bundle --help`\n- Canonical id: `badges-bundle`\n- Options: `--check`, `--claims`, `--cwd`, `--json`, `--readme`, `--write`\n- Syntax:\n\n```text\nbuildchain badges bundle [--cwd <dir>] [--readme <path>] [--claims <csv>] [--check] [--write] [--json]\n```\n\n### `buildchain badges readme`\n\n- Help: `buildchain badges readme --help`\n- Canonical id: `badges-readme`\n- Options: `--check`, `--cwd`, `--json`, `--readme`, `--write`\n- Syntax:\n\n```text\nbuildchain badges readme [--cwd <dir>] [--readme <path>] [--check] [--write] [--json]\n```\n\n## `build-contract`\n\n### `buildchain build-contract`\n\n- Help: `buildchain build-contract --help`\n- Canonical id: `build-contract`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain build-contract ...\n```\n\n## `candidate`\n\n### `buildchain candidate`\n\n- Help: `buildchain candidate --help`\n- Canonical id: `candidate`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain candidate\n```\n\n### `buildchain candidate timeline`\n\n- Help: `buildchain candidate timeline --help`\n- Canonical id: `candidate`\n- Options: `--input`, `--json`, `--output`\n- Syntax:\n\n```text\nbuildchain candidate timeline --input <file-or-json> [--output <file>] [--json]\n```\n\n## `collect`\n\n### `buildchain collect`\n\n- Help: `buildchain collect --help`\n- Canonical id: `collect`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain collect\n```\n\n### `buildchain collect github-release`\n\n- Help: `buildchain collect github-release --help`\n- Canonical id: `collect-github-release`\n- Options: `--anchor-manifest-json`, `--assets-dir`, `--assets-json`, `--base-passport-json`, `--build-facts-json`, `--build-summary-json`, `--dist-tag-evidence-json`, `--github-artifact-attestation-policy-json`, `--impact-json`, `--invariant-passport-cmd`, `--invariant-passport-json`, `--json`, `--kfd-1-witness-json`, `--kfd-2-claim-json`, `--kfd-3-artifact-verify-cmd`, `--kfd-3-artifact-witness-json`, `--kfd-3-prebuild-witness-json`, `--kfd-agent-hub-evidence-json`, `--kfd-product-gate-json`, `--kfd-support-matrix-json`, `--output-dir`, `--package-set-json`, `--platform-manifest-json`, `--product-name`, `--publish-evidence-json`, `--publish-json`, `--release-evidence-json`, `--release-extra-json`, `--release-json`, `--repository`, `--require-base-kfd`, `--tag`, `--transaction-json`, `--trusted-publishing-json`\n- Syntax:\n\n```text\nbuildchain collect github-release --tag <tag> [--repository <owner/repo>] [--assets-dir <dir>] [--assets-json <json-or-path>] [--release-json <json-or-path>] [--package-set-json <json-or-path>] [--product-name <name>] [--publish-evidence-json <json-or-path>] [--trusted-publishing-json <json-or-path>] [--transaction-json <json-or-path>] [--anchor-manifest-json <json-or-path>] [--impact-json <json-or-path>] [--build-summary-json <json-or-path>] [--build-facts-json <json-or-path>]... [--platform-manifest-json <json-or-path>]... [--dist-tag-evidence-json <json-or-path>] [--kfd-1-witness-json <json-or-path>]... [--kfd-2-claim-json <json-or-path>]... [--kfd-3-prebuild-witness-json <json-or-path>]... [--kfd-3-artifact-witness-json <json-or-path>]... [--kfd-3-artifact-verify-cmd <command>] [--kfd-support-matrix-json <json-or-path>] [--kfd-product-gate-json <json-or-path>]... [--invariant-passport-json <json-or-path>]... [--invariant-passport-cmd <command>] [--release-evidence-json <json-or-path>]... [--github-artifact-attestation-policy-json <json-or-path>]... [--kfd-agent-hub-evidence-json <json-or-path>] [--base-passport-json <json-or-path>] [--require-base-kfd] [--release-extra-json <json-or-path>] [--publish-json <json-or-path>] [--output-dir <dir>] [--json]\n```\n\n## `create`\n\n### `buildchain create`\n\n- Help: `buildchain create --help`\n- Canonical id: `create`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain create\n```\n\n### `buildchain create github-artifact-attestation-policy`\n\n- Help: `buildchain create github-artifact-attestation-policy --help`\n- Canonical id: `create`\n- Options: `--input-json`, `--json`, `--output`\n- Syntax:\n\n```text\nbuildchain create github-artifact-attestation-policy --input-json <file-or-json> [--output <file>] [--json]\n```\n\n### `buildchain create publication-admission`\n\n- Help: `buildchain create publication-admission --help`\n- Canonical id: `create`\n- Options: `--input-json`, `--json`, `--output`\n- Syntax:\n\n```text\nbuildchain create publication-admission --input-json <file-or-json> [--output <file>] [--json]\n```\n\n### `buildchain create runner-provenance`\n\n- Help: `buildchain create runner-provenance --help`\n- Canonical id: `create`\n- Options: `--input-json`, `--json`, `--output`\n- Syntax:\n\n```text\nbuildchain create runner-provenance --input-json <file-or-json> [--output <file>] [--json]\n```\n\n## `dev`\n\n### `buildchain dev`\n\n- Help: `buildchain dev --help`\n- Canonical id: `dev`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain dev\n```\n\n### `buildchain dev merge-queue`\n\n- Help: `buildchain dev merge-queue --help`\n- Canonical id: `dev`\n- Options: `--apply`, `--branch`, `--check-response-timeout-minutes`, `--cwd`, `--from-config`, `--max-entries-to-build`, `--repository`, `--workflow`\n- Syntax:\n\n```text\nbuildchain dev merge-queue --repository <owner/repo> --branch <dev/vN/vN.M> [--from-config | --workflow <required-workflow.yml>...] [--cwd <dir>] [--check-response-timeout-minutes <n>] [--max-entries-to-build <n>] [--apply]\n```\n\n## `diagnostics`\n\n### `buildchain diagnostics`\n\n- Help: `buildchain diagnostics --help`\n- Canonical id: `diagnostics`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain diagnostics\n```\n\n### `buildchain diagnostics summary`\n\n- Help: `buildchain diagnostics summary --help`\n- Canonical id: `diagnostics-summary`\n- Options: `--artifact`, `--json`, `--output`\n- Syntax:\n\n```text\nbuildchain diagnostics summary <diagnostics.json>... [--artifact <file>]... [--output <file>] [--json]\n```\n\n## `doctor`\n\n### `buildchain doctor`\n\n- Help: `buildchain doctor --help`\n- Canonical id: `doctor`\n- Options: `--cwd`, `--json`, `--require-publish-source-lock`\n- Syntax:\n\n```text\nbuildchain doctor [--cwd <dir>] [--require-publish-source-lock] [--json]\n```\n\n## `explain`\n\n### `buildchain explain`\n\n- Help: `buildchain explain --help`\n- Canonical id: `explain`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain explain\n```\n\n### `buildchain explain artifact`\n\n- Help: `buildchain explain artifact --help`\n- Canonical id: `explain-artifact`\n- Options: `--for`, `--json`, `--npm-registry`, `--passport`\n- Syntax:\n\n```text\nbuildchain explain artifact <subject> [--passport <file-or-url>] [--npm-registry <url>] [--for human|agent] [--json]\n```\n\n### `buildchain explain release`\n\n- Help: `buildchain explain release --help`\n- Canonical id: `explain-release`\n- Options: `--for`, `--json`, `--passport`\n- Syntax:\n\n```text\nbuildchain explain release --passport <file-or-url> [--for human|agent] [--json]\n```\n\n## `facts`\n\n### `buildchain facts`\n\n- Help: `buildchain facts --help`\n- Canonical id: `facts`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain facts\n```\n\n### `buildchain facts aggregate`\n\n- Help: `buildchain facts aggregate --help`\n- Canonical id: `build-facts`\n- Options: `--artifact`, `--cwd`, `--json`, `--module-fact`, `--output`, `--product`\n- Syntax:\n\n```text\nbuildchain facts aggregate [--cwd <dir>] [--product <id>] [--module-fact <file>]... [--artifact <path>]... [--output <file>] [--json]\n```\n\n### `buildchain facts module`\n\n- Help: `buildchain facts module --help`\n- Canonical id: `build-facts`\n- Options: `--cwd`, `--json`, `--legacy-kungfu-buildinfo`, `--module`, `--module-root`, `--output`, `--output-path`, `--version-source`\n- Syntax:\n\n```text\nbuildchain facts module [--cwd <dir>] [--module <id>] [--module-root <path>] [--version-source <id>] [--output <file>] [--output-path <path>]... [--legacy-kungfu-buildinfo <file>] [--json]\n```\n\n### `buildchain facts verify`\n\n- Help: `buildchain facts verify --help`\n- Canonical id: `build-facts`\n- Options: `--cwd`, `--fact`, `--json`\n- Syntax:\n\n```text\nbuildchain facts verify [--cwd <dir>] --fact <file> [--json]\n```\n\n## `github-governance`\n\n### `buildchain github-governance`\n\n- Help: `buildchain github-governance --help`\n- Canonical id: `github-governance`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain github-governance\n```\n\n### `buildchain github-governance apply`\n\n- Help: `buildchain github-governance apply --help`\n- Canonical id: `github-governance`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain github-governance <plan|apply|rollback|protection-policy-plan|ruleset-policy-plan> ...\n```\n\n### `buildchain github-governance plan`\n\n- Help: `buildchain github-governance plan --help`\n- Canonical id: `github-governance`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain github-governance <plan|apply|rollback|protection-policy-plan|ruleset-policy-plan> ...\n```\n\n### `buildchain github-governance protection-policy-plan`\n\n- Help: `buildchain github-governance protection-policy-plan --help`\n- Canonical id: `github-governance`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain github-governance <plan|apply|rollback|protection-policy-plan|ruleset-policy-plan> ...\n```\n\n### `buildchain github-governance rollback`\n\n- Help: `buildchain github-governance rollback --help`\n- Canonical id: `github-governance`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain github-governance <plan|apply|rollback|protection-policy-plan|ruleset-policy-plan> ...\n```\n\n### `buildchain github-governance ruleset-policy-plan`\n\n- Help: `buildchain github-governance ruleset-policy-plan --help`\n- Canonical id: `github-governance`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain github-governance <plan|apply|rollback|protection-policy-plan|ruleset-policy-plan> ...\n```\n\n## `help`\n\n### `buildchain help`\n\n- Help: `buildchain help --help`\n- Canonical id: `help`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain help\n```\n\n## `homebrew`\n\n### `buildchain homebrew`\n\n- Help: `buildchain homebrew --help`\n- Canonical id: `homebrew`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain homebrew\n```\n\n### `buildchain homebrew check`\n\n- Help: `buildchain homebrew check --help`\n- Canonical id: `homebrew-check`\n- Options: `--cwd`, `--json`, `--package`, `--release-passport`\n- Syntax:\n\n```text\nbuildchain homebrew check [--cwd <dir>] [--package <name>] [--release-passport <file-or-url>] [--json]\n```\n\n### `buildchain homebrew update-formula`\n\n- Help: `buildchain homebrew update-formula --help`\n- Canonical id: `homebrew-update-formula`\n- Options: `--json`, `--package`, `--release-passport`, `--write`\n- Syntax:\n\n```text\nbuildchain homebrew update-formula --package <name> --release-passport <file-or-url> [--write] [--json]\n```\n\n## `infra-contract`\n\n### `buildchain infra-contract`\n\n- Help: `buildchain infra-contract --help`\n- Canonical id: `infra-contract`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain infra-contract ...\n```\n\n## `init`\n\n### `buildchain init`\n\n- Help: `buildchain init --help`\n- Canonical id: `init`\n- Options: `--artifact-name`, `--cwd`, `--force`, `--package-manager`, `--runner-preset`, `--type`\n- Syntax:\n\n```text\nbuildchain init [--cwd <dir>] [--type package|native|web-surface|infra-contract|publication-artifact|anchored-package] [--force] [--package-manager pnpm|npm|yarn] [--runner-preset <preset>] [--artifact-name <template>]\n```\n\n## `inspect`\n\n### `buildchain inspect`\n\n- Help: `buildchain inspect --help`\n- Canonical id: `inspect`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain inspect\n```\n\n### `buildchain inspect artifact`\n\n- Help: `buildchain inspect artifact --help`\n- Canonical id: `inspect-artifact`\n- Options: `--json`, `--npm-registry`, `--passport`\n- Syntax:\n\n```text\nbuildchain inspect artifact <subject> [--passport <file-or-url>] [--npm-registry <url>] [--json]\n```\n\n### `buildchain inspect release`\n\n- Help: `buildchain inspect release --help`\n- Canonical id: `inspect-release`\n- Options: `--json`, `--passport`\n- Syntax:\n\n```text\nbuildchain inspect release --passport <file-or-url> [--json]\n```\n\n## `kfd`\n\n### `buildchain kfd`\n\n- Help: `buildchain kfd --help`\n- Canonical id: `kfd`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain kfd ...\n```\n\n### `buildchain kfd 1 gate`\n\n- Help: `buildchain kfd 1 gate --help`\n- Canonical id: `kfd-1-gate`\n- Options: `--artifact-root`, `--cwd`, `--json`, `--output`, `--witness-json`\n- Syntax:\n\n```text\nbuildchain kfd 1 gate --witness-json <file-or-json>... [--cwd <dir>] [--artifact-root <dir>] [--output <file>] [--json]\n```\n\n### `buildchain kfd 1 schema`\n\n- Help: `buildchain kfd 1 schema --help`\n- Canonical id: `kfd-1-schema`\n- Options: `--json`, `--schema`\n- Syntax:\n\n```text\nbuildchain kfd 1 schema [--schema <name>] [--json]\n```\n\n### `buildchain kfd 1 verify`\n\n- Help: `buildchain kfd 1 verify --help`\n- Canonical id: `kfd-1-verify`\n- Options: `--gate-json`, `--json`\n- Syntax:\n\n```text\nbuildchain kfd 1 verify --gate-json <file-or-json> [--json]\n```\n\n### `buildchain kfd 1 witness`\n\n- Help: `buildchain kfd 1 witness --help`\n- Canonical id: `kfd-1-witness`\n- Options: `--cwd`, `--json`, `--output`, `--source-sha`\n- Syntax:\n\n```text\nbuildchain kfd 1 witness [--cwd <dir>] [--source-sha <sha>] [--output <file>] [--json]\n```\n\n### `buildchain kfd 2 claims`\n\n- Help: `buildchain kfd 2 claims --help`\n- Canonical id: `kfd-2-claims`\n- Options: `--cwd`, `--json`, `--output-dir`\n- Syntax:\n\n```text\nbuildchain kfd 2 claims [--cwd <dir>] [--output-dir <dir>] [--json]\n```\n\n### `buildchain kfd 2 product-claims check`\n\n- Help: `buildchain kfd 2 product-claims check --help`\n- Canonical id: `kfd-2-product-claims`\n- Options: `--channel`, `--cwd`, `--json`, `--output-dir`, `--registry`, `--source-sha`, `--tag`, `--version`\n- Syntax:\n\n```text\nbuildchain kfd 2 product-claims <check|write|render> [--cwd <dir>] [--registry <path>] [--output-dir <dir>] [--version <version>] [--channel <channel>] [--tag <tag>] [--source-sha <sha>] [--json]\n```\n\n### `buildchain kfd 2 product-claims render`\n\n- Help: `buildchain kfd 2 product-claims render --help`\n- Canonical id: `kfd-2-product-claims`\n- Options: `--channel`, `--cwd`, `--json`, `--output-dir`, `--registry`, `--source-sha`, `--tag`, `--version`\n- Syntax:\n\n```text\nbuildchain kfd 2 product-claims <check|write|render> [--cwd <dir>] [--registry <path>] [--output-dir <dir>] [--version <version>] [--channel <channel>] [--tag <tag>] [--source-sha <sha>] [--json]\n```\n\n### `buildchain kfd 2 product-claims write`\n\n- Help: `buildchain kfd 2 product-claims write --help`\n- Canonical id: `kfd-2-product-claims`\n- Options: `--channel`, `--cwd`, `--json`, `--output-dir`, `--registry`, `--source-sha`, `--tag`, `--version`\n- Syntax:\n\n```text\nbuildchain kfd 2 product-claims <check|write|render> [--cwd <dir>] [--registry <path>] [--output-dir <dir>] [--version <version>] [--channel <channel>] [--tag <tag>] [--source-sha <sha>] [--json]\n```\n\n### `buildchain kfd 2 schema`\n\n- Help: `buildchain kfd 2 schema --help`\n- Canonical id: `kfd-2-schema`\n- Options: `--json`, `--schema`\n- Syntax:\n\n```text\nbuildchain kfd 2 schema [--schema <name>] [--json]\n```\n\n### `buildchain kfd 2 taxonomy`\n\n- Help: `buildchain kfd 2 taxonomy --help`\n- Canonical id: `kfd-2-taxonomy`\n- Options: `--entry-json`, `--json`, `--kind`\n- Syntax:\n\n```text\nbuildchain kfd 2 taxonomy --entry-json <file-or-json>... [--kind residualRisk|downgradeReason] [--json]\n```\n\n### `buildchain kfd 2 trust-assessment`\n\n- Help: `buildchain kfd 2 trust-assessment --help`\n- Canonical id: `kfd-2-trust-assessment`\n- Options: `--assessment-json`, `--json`\n- Syntax:\n\n```text\nbuildchain kfd 2 trust-assessment [--assessment-json <file-or-json>] [--json]\n```\n\n### `buildchain kfd 2 trust-claims`\n\n- Help: `buildchain kfd 2 trust-claims --help`\n- Canonical id: `kfd-2-trust-claims`\n- Options: `--claims-json`, `--json`\n- Syntax:\n\n```text\nbuildchain kfd 2 trust-claims [--claims-json <file-or-json>] [--json]\n```\n\n### `buildchain kfd 3`\n\n- Help: `buildchain kfd 3 --help`\n- Canonical id: `kfd-3`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain kfd 3 ...\n```\n\n### `buildchain kfd 3 audit`\n\n- Help: `buildchain kfd 3 audit --help`\n- Canonical id: `kfd-3-audit`\n- Options: `--artifact`, `--cwd`, `--json`, `--registry`\n- Syntax:\n\n```text\nbuildchain kfd 3 audit [--cwd <dir>] [--registry <path>] [--artifact <path>] [--json]\n```\n\n### `buildchain kfd 3 detect`\n\n- Help: `buildchain kfd 3 detect --help`\n- Canonical id: `kfd-3-detect`\n- Options: `--artifact`, `--cwd`, `--json`, `--kind`\n- Syntax:\n\n```text\nbuildchain kfd 3 detect [--cwd <dir>] [--kind <kind>]... [--artifact <path>] [--json]\n```\n\n### `buildchain kfd 3 query`\n\n- Help: `buildchain kfd 3 query --help`\n- Canonical id: `kfd-3-query`\n- Options: `--artifact`, `--cwd`, `--json`, `--passport`, `--registry`\n- Syntax:\n\n```text\nbuildchain kfd 3 query [<product>] [--cwd <dir>] [--registry <path>] [--passport <file-or-url>] [--artifact <path>] [--json]\n```\n\n### `buildchain kfd 3 register binary`\n\n- Help: `buildchain kfd 3 register binary --help`\n- Canonical id: `kfd-3-register`\n- Options: `--artifact`, `--cwd`, `--json`, `--product`, `--registry`\n- Syntax:\n\n```text\nbuildchain kfd 3 register <node-api|python-api|cli|binary|documentation|site-bundle> [--cwd <dir>] [--registry <path>] [--artifact <path>] [--product <name>] [--json]\n```\n\n### `buildchain kfd 3 register cli`\n\n- Help: `buildchain kfd 3 register cli --help`\n- Canonical id: `kfd-3-register`\n- Options: `--artifact`, `--cwd`, `--json`, `--product`, `--registry`\n- Syntax:\n\n```text\nbuildchain kfd 3 register <node-api|python-api|cli|binary|documentation|site-bundle> [--cwd <dir>] [--registry <path>] [--artifact <path>] [--product <name>] [--json]\n```\n\n### `buildchain kfd 3 register documentation`\n\n- Help: `buildchain kfd 3 register documentation --help`\n- Canonical id: `kfd-3-register`\n- Options: `--artifact`, `--cwd`, `--json`, `--product`, `--registry`\n- Syntax:\n\n```text\nbuildchain kfd 3 register <node-api|python-api|cli|binary|documentation|site-bundle> [--cwd <dir>] [--registry <path>] [--artifact <path>] [--product <name>] [--json]\n```\n\n### `buildchain kfd 3 register node-api`\n\n- Help: `buildchain kfd 3 register node-api --help`\n- Canonical id: `kfd-3-register`\n- Options: `--artifact`, `--cwd`, `--json`, `--product`, `--registry`\n- Syntax:\n\n```text\nbuildchain kfd 3 register <node-api|python-api|cli|binary|documentation|site-bundle> [--cwd <dir>] [--registry <path>] [--artifact <path>] [--product <name>] [--json]\n```\n\n### `buildchain kfd 3 register python-api`\n\n- Help: `buildchain kfd 3 register python-api --help`\n- Canonical id: `kfd-3-register`\n- Options: `--artifact`, `--cwd`, `--json`, `--product`, `--registry`\n- Syntax:\n\n```text\nbuildchain kfd 3 register <node-api|python-api|cli|binary|documentation|site-bundle> [--cwd <dir>] [--registry <path>] [--artifact <path>] [--product <name>] [--json]\n```\n\n### `buildchain kfd 3 register site-bundle`\n\n- Help: `buildchain kfd 3 register site-bundle --help`\n- Canonical id: `kfd-3-register`\n- Options: `--artifact`, `--cwd`, `--json`, `--product`, `--registry`\n- Syntax:\n\n```text\nbuildchain kfd 3 register <node-api|python-api|cli|binary|documentation|site-bundle> [--cwd <dir>] [--registry <path>] [--artifact <path>] [--product <name>] [--json]\n```\n\n### `buildchain kfd 3 witness`\n\n- Help: `buildchain kfd 3 witness --help`\n- Canonical id: `kfd-3-witness`\n- Options: `--artifact`, `--cwd`, `--json`, `--kind`, `--output`, `--registry`, `--source-sha`\n- Syntax:\n\n```text\nbuildchain kfd 3 witness [--cwd <dir>] [--registry <path>] [--kind prebuild|artifact] [--source-sha <sha>] [--artifact <path>] [--output <file>] [--json]\n```\n\n### `buildchain kfd 4 gate`\n\n- Help: `buildchain kfd 4 gate --help`\n- Canonical id: `kfd-4-gate`\n- Options: `--cwd`, `--input-json`, `--json`, `--output`\n- Syntax:\n\n```text\nbuildchain kfd 4 gate --input-json <file-or-json> [--cwd <dir>] [--output <file>] [--json]\n```\n\n### `buildchain kfd 4 schema`\n\n- Help: `buildchain kfd 4 schema --help`\n- Canonical id: `kfd-4-schema`\n- Options: `--json`, `--schema`\n- Syntax:\n\n```text\nbuildchain kfd 4 schema [--schema <name>] [--json]\n```\n\n### `buildchain kfd 4 verify`\n\n- Help: `buildchain kfd 4 verify --help`\n- Canonical id: `kfd-4-verify`\n- Options: `--expected-source-sha`, `--gate-json`, `--json`\n- Syntax:\n\n```text\nbuildchain kfd 4 verify --gate-json <file-or-json> [--expected-source-sha <sha>] [--json]\n```\n\n### `buildchain kfd 5 gate`\n\n- Help: `buildchain kfd 5 gate --help`\n- Canonical id: `kfd-5-gate`\n- Options: `--cwd`, `--input-json`, `--json`, `--output`\n- Syntax:\n\n```text\nbuildchain kfd 5 gate --input-json <file-or-json> [--cwd <dir>] [--output <file>] [--json]\n```\n\n### `buildchain kfd 5 schema`\n\n- Help: `buildchain kfd 5 schema --help`\n- Canonical id: `kfd-5-schema`\n- Options: `--json`, `--schema`\n- Syntax:\n\n```text\nbuildchain kfd 5 schema [--schema <name>] [--json]\n```\n\n### `buildchain kfd 5 verify`\n\n- Help: `buildchain kfd 5 verify --help`\n- Canonical id: `kfd-5-verify`\n- Options: `--expected-source-sha`, `--gate-json`, `--json`\n- Syntax:\n\n```text\nbuildchain kfd 5 verify --gate-json <file-or-json> [--expected-source-sha <sha>] [--json]\n```\n\n### `buildchain kfd 7 gate`\n\n- Help: `buildchain kfd 7 gate --help`\n- Canonical id: `kfd-7-gate`\n- Options: `--cwd`, `--input-json`, `--json`, `--output`\n- Syntax:\n\n```text\nbuildchain kfd 7 gate --input-json <file-or-json> [--cwd <dir>] [--output <file>] [--json]\n```\n\n### `buildchain kfd 7 schema`\n\n- Help: `buildchain kfd 7 schema --help`\n- Canonical id: `kfd-7-schema`\n- Options: `--json`, `--schema`\n- Syntax:\n\n```text\nbuildchain kfd 7 schema [--schema <name>] [--json]\n```\n\n### `buildchain kfd 7 verify`\n\n- Help: `buildchain kfd 7 verify --help`\n- Canonical id: `kfd-7-verify`\n- Options: `--expected-source-sha`, `--gate-json`, `--json`\n- Syntax:\n\n```text\nbuildchain kfd 7 verify --gate-json <file-or-json> [--expected-source-sha <sha>] [--json]\n```\n\n### `buildchain kfd aggregate`\n\n- Help: `buildchain kfd aggregate --help`\n- Canonical id: `kfd-aggregate`\n- Options: `--cwd`, `--json`\n- Syntax:\n\n```text\nbuildchain kfd aggregate [--cwd <dir>] [--json]\n```\n\n### `buildchain kfd hub explain`\n\n- Help: `buildchain kfd hub explain --help`\n- Canonical id: `kfd-hub`\n- Options: `--cwd`, `--declaration`, `--for`, `--force`, `--json`, `--output-dir`, `--write`\n- Syntax:\n\n```text\nbuildchain kfd hub <init|inspect|test|explain> [--cwd <dir>] [--declaration <path>] [--output-dir <path>] [--write] [--force] [--for agent] [--json]\n```\n\n### `buildchain kfd hub init`\n\n- Help: `buildchain kfd hub init --help`\n- Canonical id: `kfd-hub`\n- Options: `--cwd`, `--declaration`, `--for`, `--force`, `--json`, `--output-dir`, `--write`\n- Syntax:\n\n```text\nbuildchain kfd hub <init|inspect|test|explain> [--cwd <dir>] [--declaration <path>] [--output-dir <path>] [--write] [--force] [--for agent] [--json]\n```\n\n### `buildchain kfd hub inspect`\n\n- Help: `buildchain kfd hub inspect --help`\n- Canonical id: `kfd-hub`\n- Options: `--cwd`, `--declaration`, `--for`, `--force`, `--json`, `--output-dir`, `--write`\n- Syntax:\n\n```text\nbuildchain kfd hub <init|inspect|test|explain> [--cwd <dir>] [--declaration <path>] [--output-dir <path>] [--write] [--force] [--for agent] [--json]\n```\n\n### `buildchain kfd hub test`\n\n- Help: `buildchain kfd hub test --help`\n- Canonical id: `kfd-hub`\n- Options: `--cwd`, `--declaration`, `--for`, `--force`, `--json`, `--output-dir`, `--write`\n- Syntax:\n\n```text\nbuildchain kfd hub <init|inspect|test|explain> [--cwd <dir>] [--declaration <path>] [--output-dir <path>] [--write] [--force] [--for agent] [--json]\n```\n\n### `buildchain kfd migrate-layout`\n\n- Help: `buildchain kfd migrate-layout --help`\n- Canonical id: `kfd-migrate-layout`\n- Options: `--cwd`, `--force`, `--json`, `--write`\n- Syntax:\n\n```text\nbuildchain kfd migrate-layout [--cwd <dir>] [--write] [--force] [--json]\n```\n\n### `buildchain kfd schema list`\n\n- Help: `buildchain kfd schema list --help`\n- Canonical id: `kfd-schema-list`\n- Options: `--json`, `--standard`\n- Syntax:\n\n```text\nbuildchain kfd schema list [--standard kfd-1|kfd-2|kfd-3|kfd-4] [--json]\n```\n\n### `buildchain kfd schema show kfd-1`\n\n- Help: `buildchain kfd schema show kfd-1 --help`\n- Canonical id: `kfd-schema-show`\n- Options: `--json`, `--schema`\n- Syntax:\n\n```text\nbuildchain kfd schema show <kfd-1|kfd-2|kfd-3|kfd-4> [--schema <name>] [--json]\n```\n\n### `buildchain kfd schema show kfd-2`\n\n- Help: `buildchain kfd schema show kfd-2 --help`\n- Canonical id: `kfd-schema-show`\n- Options: `--json`, `--schema`\n- Syntax:\n\n```text\nbuildchain kfd schema show <kfd-1|kfd-2|kfd-3|kfd-4> [--schema <name>] [--json]\n```\n\n### `buildchain kfd schema show kfd-3`\n\n- Help: `buildchain kfd schema show kfd-3 --help`\n- Canonical id: `kfd-schema-show`\n- Options: `--json`, `--schema`\n- Syntax:\n\n```text\nbuildchain kfd schema show <kfd-1|kfd-2|kfd-3|kfd-4> [--schema <name>] [--json]\n```\n\n### `buildchain kfd schema show kfd-4`\n\n- Help: `buildchain kfd schema show kfd-4 --help`\n- Canonical id: `kfd-schema-show`\n- Options: `--json`, `--schema`\n- Syntax:\n\n```text\nbuildchain kfd schema show <kfd-1|kfd-2|kfd-3|kfd-4> [--schema <name>] [--json]\n```\n\n### `buildchain kfd status`\n\n- Help: `buildchain kfd status --help`\n- Canonical id: `kfd-status`\n- Options: `--cwd`, `--json`\n- Syntax:\n\n```text\nbuildchain kfd status [--cwd <dir>] [--json]\n```\n\n### `buildchain kfd support project`\n\n- Help: `buildchain kfd support project --help`\n- Canonical id: `kfd-support`\n- Options: `--checked-at`, `--expected-source-sha`, `--gate-json`, `--json`, `--matrix-json`, `--output`\n- Syntax:\n\n```text\nbuildchain kfd support project --matrix-json <file-or-json> --gate-json <file-or-json>... [--expected-source-sha <sha>] [--checked-at <date-time>] [--output <file>] [--json]\n```\n\n### `buildchain kfd support verify`\n\n- Help: `buildchain kfd support verify --help`\n- Canonical id: `kfd-support`\n- Options: `--checked-at`, `--expected-source-sha`, `--json`, `--projection-json`\n- Syntax:\n\n```text\nbuildchain kfd support verify --projection-json <file-or-json> [--expected-source-sha <sha>] [--checked-at <date-time>] [--json]\n```\n\n### `buildchain kfd upstream check`\n\n- Help: `buildchain kfd upstream check --help`\n- Canonical id: `kfd-upstream-check`\n- Options: `--aggregate-json`, `--cwd`, `--json`\n- Syntax:\n\n```text\nbuildchain kfd upstream check [--cwd <dir>] [--aggregate-json <file-or-json>] [--json]\n```\n\n### `buildchain kfd upstream collect`\n\n- Help: `buildchain kfd upstream collect --help`\n- Canonical id: `kfd-upstream-collect`\n- Options: `--cwd`, `--json`, `--output`\n- Syntax:\n\n```text\nbuildchain kfd upstream collect [--cwd <dir>] [--output <file>] [--json]\n```\n\n### `buildchain kfd upstream roles`\n\n- Help: `buildchain kfd upstream roles --help`\n- Canonical id: `kfd-upstream-roles`\n- Options: `--json`\n- Syntax:\n\n```text\nbuildchain kfd upstream roles [--json]\n```\n\n## `layout`\n\n### `buildchain layout`\n\n- Help: `buildchain layout --help`\n- Canonical id: `layout`\n- Options: `--cwd`, `--json`\n- Syntax:\n\n```text\nbuildchain layout [--cwd <dir>] [--json]\n```\n\n## `lifecycle`\n\n### `buildchain lifecycle`\n\n- Help: `buildchain lifecycle --help`\n- Canonical id: `lifecycle`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain lifecycle\n```\n\n### `buildchain lifecycle run`\n\n- Help: `buildchain lifecycle run --help`\n- Canonical id: `lifecycle`\n- Options: `--artifact-name`, `--artifact-path`, `--cwd`, `--manifest-path`, `--process-summary`, `--required`, `--summary-path`\n- Syntax:\n\n```text\nbuildchain lifecycle run <stage> [--cwd <dir>] [--required] [--artifact-name <name>] [--artifact-path <path>]... [--manifest-path <path>] [--summary-path <path>] [--process-summary <json>]\n```\n\n## `log`\n\n### `buildchain log`\n\n- Help: `buildchain log --help`\n- Canonical id: `log`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain log\n```\n\n### `buildchain log error`\n\n- Help: `buildchain log error --help`\n- Canonical id: `logging`\n- Options: `--attribute`, `--component`, `--event`, `--json`, `--path`, `--phase`, `--source`\n- Syntax:\n\n```text\nbuildchain log <info|warn|error> --event <name> [--phase <phase>] [--component <name>] [--source <name>] [--attribute key=value]... [--path <jsonl>] [--json]\n```\n\n### `buildchain log info`\n\n- Help: `buildchain log info --help`\n- Canonical id: `logging`\n- Options: `--attribute`, `--component`, `--event`, `--json`, `--path`, `--phase`, `--source`\n- Syntax:\n\n```text\nbuildchain log <info|warn|error> --event <name> [--phase <phase>] [--component <name>] [--source <name>] [--attribute key=value]... [--path <jsonl>] [--json]\n```\n\n### `buildchain log summary`\n\n- Help: `buildchain log summary --help`\n- Canonical id: `logging`\n- Options: `--json`, `--path`\n- Syntax:\n\n```text\nbuildchain log summary [--path <jsonl>] [--json]\n```\n\n### `buildchain log warn`\n\n- Help: `buildchain log warn --help`\n- Canonical id: `logging`\n- Options: `--attribute`, `--component`, `--event`, `--json`, `--path`, `--phase`, `--source`\n- Syntax:\n\n```text\nbuildchain log <info|warn|error> --event <name> [--phase <phase>] [--component <name>] [--source <name>] [--attribute key=value]... [--path <jsonl>] [--json]\n```\n\n## `mark`\n\n### `buildchain mark`\n\n- Help: `buildchain mark --help`\n- Canonical id: `mark`\n- Options: `--attribute`, `--component`, `--event`, `--json`, `--path`, `--phase`\n- Syntax:\n\n```text\nbuildchain mark --event <name> [--phase <phase>] [--component <name>] [--attribute key=value]... [--path <jsonl>] [--json]\n```\n\n## `npm`\n\n### `buildchain npm`\n\n- Help: `buildchain npm --help`\n- Canonical id: `npm`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain npm\n```\n\n### `buildchain npm dry-run`\n\n- Help: `buildchain npm dry-run --help`\n- Canonical id: `npm-dry-run`\n- Options: `--cwd`, `--dist-tag`, `--expected-tag`, `--json`, `--registry`, `--skip-npm-publish-dry-run`\n- Syntax:\n\n```text\nbuildchain npm dry-run [--cwd <dir>] [--expected-tag <tag>] [--registry <url>] [--dist-tag <tag>] [--skip-npm-publish-dry-run] [--json]\n```\n\n## `paper`\n\n### `buildchain paper`\n\n- Help: `buildchain paper --help`\n- Canonical id: `paper`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain paper\n```\n\n### `buildchain paper agent verify`\n\n- Help: `buildchain paper agent verify --help`\n- Canonical id: `paper-agent`\n- Options: `--cwd`, `--json`, `--offline`\n- Syntax:\n\n```text\nbuildchain paper agent verify [--cwd <dir>] [--offline] [--json]\n```\n\n### `buildchain paper alpha`\n\n- Help: `buildchain paper alpha --help`\n- Canonical id: `paper-alpha`\n- Options: `--cwd`, `--execute`, `--json`, `--source-ref`, `--target-ref`\n- Syntax:\n\n```text\nbuildchain paper alpha [--cwd <dir>] [--source-ref <ref>] [--target-ref <ref>] [--execute] [--json]\n```\n\n### `buildchain paper bootstrap npm`\n\n- Help: `buildchain paper bootstrap npm --help`\n- Canonical id: `paper-bootstrap-npm`\n- Options: `--confirm-public-package`, `--cwd`, `--execute`, `--json`\n- Syntax:\n\n```text\nbuildchain paper bootstrap npm [--cwd <dir>] [--execute] [--confirm-public-package <name>] [--json]\n```\n\n### `buildchain paper build`\n\n- Help: `buildchain paper build --help`\n- Canonical id: `paper-build`\n- Options: `--cwd`, `--execute`, `--json`\n- Syntax:\n\n```text\nbuildchain paper build [--cwd <dir>] [--execute] [--json]\n```\n\n### `buildchain paper fleet audit`\n\n- Help: `buildchain paper fleet audit --help`\n- Canonical id: `paper-fleet-audit`\n- Options: `--json`, `--offline`, `--root`\n- Syntax:\n\n```text\nbuildchain paper fleet audit [--root <dir>] [--offline] [--json]\n```\n\n### `buildchain paper fleet update`\n\n- Help: `buildchain paper fleet update --help`\n- Canonical id: `paper-fleet-update`\n- Options: `--json`, `--root`, `--write`\n- Syntax:\n\n```text\nbuildchain paper fleet update [--root <dir>] [--write] [--json]\n```\n\n### `buildchain paper migrate`\n\n- Help: `buildchain paper migrate --help`\n- Canonical id: `paper-migrate`\n- Options: `--cwd`, `--json`, `--write`\n- Syntax:\n\n```text\nbuildchain paper migrate [--cwd <dir>] [--write] [--json]\n```\n\n### `buildchain paper preflight`\n\n- Help: `buildchain paper preflight --help`\n- Canonical id: `paper-preflight`\n- Options: `--cwd`, `--json`, `--offline`\n- Syntax:\n\n```text\nbuildchain paper preflight [--cwd <dir>] [--offline] [--json]\n```\n\n### `buildchain paper resume`\n\n- Help: `buildchain paper resume --help`\n- Canonical id: `paper-resume`\n- Options: `--buildchain-ref`, `--cwd`, `--execute`, `--json`\n- Syntax:\n\n```text\nbuildchain paper resume [--cwd <dir>] [--buildchain-ref <ref>] [--execute] [--json]\n```\n\n### `buildchain paper scaffold`\n\n- Help: `buildchain paper scaffold --help`\n- Canonical id: `paper-scaffold`\n- Options: `--json`, `--package`, `--repository`, `--write`\n- Syntax:\n\n```text\nbuildchain paper scaffold --package <name> --repository <owner/repo> [--write] [--json]\n```\n\n### `buildchain paper status`\n\n- Help: `buildchain paper status --help`\n- Canonical id: `paper-status`\n- Options: `--cwd`, `--json`\n- Syntax:\n\n```text\nbuildchain paper status [--cwd <dir>] [--json]\n```\n\n### `buildchain paper work start`\n\n- Help: `buildchain paper work start --help`\n- Canonical id: `paper-work-start`\n- Options: `--branch`, `--cwd`, `--execute`, `--json`\n- Syntax:\n\n```text\nbuildchain paper work start <topic> [--cwd <dir>] [--branch <branch>] [--execute] [--json]\n```\n\n### `buildchain paper work submit`\n\n- Help: `buildchain paper work submit --help`\n- Canonical id: `paper-work-submit`\n- Options: `--body`, `--cwd`, `--execute`, `--json`, `--title`\n- Syntax:\n\n```text\nbuildchain paper work submit [--cwd <dir>] [--title <title>] [--body <body>] [--execute] [--json]\n```\n\n## `portable-cache`\n\n### `buildchain portable-cache`\n\n- Help: `buildchain portable-cache --help`\n- Canonical id: `portable-cache`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain portable-cache\n```\n\n### `buildchain portable-cache plan`\n\n- Help: `buildchain portable-cache plan --help`\n- Canonical id: `portable-cache`\n- Options: `--github-output`, `--json`, `--manifest`, `--output`\n- Syntax:\n\n```text\nbuildchain portable-cache plan --manifest <file-or-json> [--output <file>] [--github-output <file>] [--json]\n```\n\n### `buildchain portable-cache receipt`\n\n- Help: `buildchain portable-cache receipt --help`\n- Canonical id: `portable-cache`\n- Options: `--cache-hit`, `--cold-fallback-status`, `--json`, `--matched-key`, `--output`, `--plan`, `--validation-reason`, `--validation-status`\n- Syntax:\n\n```text\nbuildchain portable-cache receipt --plan <file-or-json> [--matched-key <key>] [--cache-hit true|false] [--validation-status pass|fail] [--validation-reason <text>] [--cold-fallback-status not-run|passed|failed] [--output <file>] [--json]\n```\n\n## `project`\n\n### `buildchain project`\n\n- Help: `buildchain project --help`\n- Canonical id: `project`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain project\n```\n\n### `buildchain project kfx-admission`\n\n- Help: `buildchain project kfx-admission --help`\n- Canonical id: `project`\n- Options: `--assessment-time`, `--expected-contract`, `--expected-issuer`, `--expected-publisher`, `--expected-root`, `--json`\n- Syntax:\n\n```text\nbuildchain project kfx-admission <file-or-json> [--assessment-time <epoch>] [--expected-root <sha256:...>] [--expected-issuer <issuer>] [--expected-publisher <publisher>] [--expected-contract <version>] [--json]\n```\n\n## `publication-artifact`\n\n### `buildchain publication-artifact`\n\n- Help: `buildchain publication-artifact --help`\n- Canonical id: `publication-artifact`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain publication-artifact\n```\n\n### `buildchain publication-artifact manifest`\n\n- Help: `buildchain publication-artifact manifest --help`\n- Canonical id: `publication-artifact-manifest`\n- Options: `--cwd`, `--json`, `--no-source-bundle`, `--output`, `--passport-output`, `--registry-output`, `--source-bundle`, `--source-sha`\n- Syntax:\n\n```text\nbuildchain publication-artifact manifest [--cwd <dir>] [--source-sha <sha>] [--output <file>] [--passport-output <file>] [--registry-output <file>] [--source-bundle <file>] [--no-source-bundle] [--json]\n```\n\n### `buildchain publication-artifact npm-package`\n\n- Help: `buildchain publication-artifact npm-package --help`\n- Canonical id: `publication-artifact-npm-package`\n- Options: `--cwd`, `--json`, `--output-dir`, `--package-name`\n- Syntax:\n\n```text\nbuildchain publication-artifact npm-package [--cwd <dir>] [--output-dir <dir>] [--package-name <name>] [--json]\n```\n\n### `buildchain publication-artifact reproducibility`\n\n- Help: `buildchain publication-artifact reproducibility --help`\n- Canonical id: `publication-artifact-reproducibility`\n- Options: `--allow-unpinned-toolchain`, `--cwd`, `--json`, `--no-toolchain-pull`, `--output`, `--promote`, `--source-sha`\n- Syntax:\n\n```text\nbuildchain publication-artifact reproducibility [--cwd <dir>] [--source-sha <sha>] [--output <file>] [--promote] [--no-toolchain-pull] [--allow-unpinned-toolchain] [--json]\n```\n\n## `publish-source`\n\n### `buildchain publish-source`\n\n- Help: `buildchain publish-source --help`\n- Canonical id: `publish-source`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain publish-source\n```\n\n### `buildchain publish-source lock`\n\n- Help: `buildchain publish-source lock --help`\n- Canonical id: `publish-source`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain publish-source <lock|manifest|verify-lock|verify-channel-ref|validate-anchored-release> ...\n```\n\n### `buildchain publish-source manifest`\n\n- Help: `buildchain publish-source manifest --help`\n- Canonical id: `publish-source`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain publish-source <lock|manifest|verify-lock|verify-channel-ref|validate-anchored-release> ...\n```\n\n### `buildchain publish-source validate-anchored-release`\n\n- Help: `buildchain publish-source validate-anchored-release --help`\n- Canonical id: `publish-source`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain publish-source <lock|manifest|verify-lock|verify-channel-ref|validate-anchored-release> ...\n```\n\n### `buildchain publish-source verify-channel-ref`\n\n- Help: `buildchain publish-source verify-channel-ref --help`\n- Canonical id: `publish-source`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain publish-source <lock|manifest|verify-lock|verify-channel-ref|validate-anchored-release> ...\n```\n\n### `buildchain publish-source verify-lock`\n\n- Help: `buildchain publish-source verify-lock --help`\n- Canonical id: `publish-source`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain publish-source <lock|manifest|verify-lock|verify-channel-ref|validate-anchored-release> ...\n```\n\n## `release`\n\n### `buildchain release`\n\n- Help: `buildchain release --help`\n- Canonical id: `release-transaction`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain release\n```\n\n### `buildchain release --dry-run`\n\n- Help: `buildchain release --dry-run --help`\n- Canonical id: `release-dry-run`\n- Options: `--dry-run`, `--json`, `--sha`, `--source-ref`, `--tags`, `--target-ref`\n- Syntax:\n\n```text\nbuildchain release --dry-run --target-ref <ref> [--sha <sha>] [--source-ref <ref>] [--tags <comma-list>] [--json]\n```\n\n### `buildchain release abort`\n\n- Help: `buildchain release abort --help`\n- Canonical id: `release-transaction`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain release <inspect|recover|finalize|abort> ...\n```\n\n### `buildchain release dry-run`\n\n- Help: `buildchain release dry-run --help`\n- Canonical id: `release-dry-run`\n- Options: `--json`, `--sha`, `--source-ref`, `--tags`, `--target-ref`\n- Syntax:\n\n```text\nbuildchain release dry-run --target-ref <ref> [--sha <sha>] [--source-ref <ref>] [--tags <comma-list>] [--json]\n```\n\n### `buildchain release explain`\n\n- Help: `buildchain release explain --help`\n- Canonical id: `release-dry-run`\n- Options: `--json`, `--sha`, `--source-ref`, `--tags`, `--target-ref`\n- Syntax:\n\n```text\nbuildchain release explain --target-ref <ref> [--sha <sha>] [--source-ref <ref>] [--tags <comma-list>] [--json]\n```\n\n### `buildchain release finalize`\n\n- Help: `buildchain release finalize --help`\n- Canonical id: `release-transaction`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain release <inspect|recover|finalize|abort> ...\n```\n\n### `buildchain release inspect`\n\n- Help: `buildchain release inspect --help`\n- Canonical id: `release-transaction`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain release <inspect|recover|finalize|abort> ...\n```\n\n### `buildchain release line open`\n\n- Help: `buildchain release line open --help`\n- Canonical id: `release-line-open`\n- Options: `--initial-version`, `--json`, `--major`, `--minor`, `--source-ref`, `--write`\n- Syntax:\n\n```text\nbuildchain release line open --major <n> --minor <n> [--source-ref <ref>] [--initial-version <version>] [--write] [--json]\n```\n\n### `buildchain release recover`\n\n- Help: `buildchain release recover --help`\n- Canonical id: `release-transaction`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain release <inspect|recover|finalize|abort> ...\n```\n\n## `release-governance`\n\n### `buildchain release-governance`\n\n- Help: `buildchain release-governance --help`\n- Canonical id: `release-governance`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain release-governance\n```\n\n### `buildchain release-governance reconcile`\n\n- Help: `buildchain release-governance reconcile --help`\n- Canonical id: `release-governance`\n- Options: `--apply`, `--branch`, `--candidate-sha`, `--json`, `--repository`\n- Syntax:\n\n```text\nbuildchain release-governance reconcile --repository <owner/repo> --branch <dev|alpha|release/vN/vN.N> --candidate-sha <sha> [--apply] [--json]\n```\n\n## `release-propagation`\n\n### `buildchain release-propagation`\n\n- Help: `buildchain release-propagation --help`\n- Canonical id: `release-propagation`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain release-propagation\n```\n\n### `buildchain release-propagation entry`\n\n- Help: `buildchain release-propagation entry --help`\n- Canonical id: `release-propagation`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain release-propagation <plan|write-lock|work|entry|pickup> ...\n```\n\n### `buildchain release-propagation pickup`\n\n- Help: `buildchain release-propagation pickup --help`\n- Canonical id: `release-propagation`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain release-propagation <plan|write-lock|work|entry|pickup> ...\n```\n\n### `buildchain release-propagation plan`\n\n- Help: `buildchain release-propagation plan --help`\n- Canonical id: `release-propagation`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain release-propagation <plan|write-lock|work|entry|pickup> ...\n```\n\n### `buildchain release-propagation work`\n\n- Help: `buildchain release-propagation work --help`\n- Canonical id: `release-propagation`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain release-propagation <plan|write-lock|work|entry|pickup> ...\n```\n\n### `buildchain release-propagation write-lock`\n\n- Help: `buildchain release-propagation write-lock --help`\n- Canonical id: `release-propagation`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain release-propagation <plan|write-lock|work|entry|pickup> ...\n```\n\n## `sample`\n\n### `buildchain sample`\n\n- Help: `buildchain sample --help`\n- Canonical id: `sample`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain sample\n```\n\n### `buildchain sample process-tree`\n\n- Help: `buildchain sample process-tree --help`\n- Canonical id: `sample-process-tree`\n- Options: `--interval-ms`, `--json`, `--label`, `--output`, `--requested-parallelism`, `--summary-output`\n- Syntax:\n\n```text\nbuildchain sample process-tree [--interval-ms <n>] [--label <name>] [--output <jsonl>] [--summary-output <json>] [--requested-parallelism <n>] [--json] -- <command> [args...]\n```\n\n## `span`\n\n### `buildchain span`\n\n- Help: `buildchain span --help`\n- Canonical id: `span`\n- Options: `--component`, `--event`, `--path`, `--phase`\n- Syntax:\n\n```text\nbuildchain span --event <name> [--phase <phase>] [--component <name>] [--path <jsonl>] -- <command> [args...]\n```\n\n## `transaction`\n\n### `buildchain transaction`\n\n- Help: `buildchain transaction --help`\n- Canonical id: `transaction-inspect`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain transaction\n```\n\n### `buildchain transaction inspect`\n\n- Help: `buildchain transaction inspect --help`\n- Canonical id: `transaction-inspect`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain transaction inspect ...\n```\n\n## `validate`\n\n### `buildchain validate`\n\n- Help: `buildchain validate --help`\n- Canonical id: `validate`\n- Options: `--cwd`, `--require-lifecycle-stages`, `--require-version-state`\n- Syntax:\n\n```text\nbuildchain validate [--cwd <dir>] [--require-version-state] [--require-lifecycle-stages <comma-list>]\n```\n\n## `verify`\n\n### `buildchain verify`\n\n- Help: `buildchain verify --help`\n- Canonical id: `verify`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain verify\n```\n\n### `buildchain verify artifact dir`\n\n- Help: `buildchain verify artifact dir --help`\n- Canonical id: `verify-artifact`\n- Options: `--json`, `--locator-config`, `--npm-registry`, `--passport`, `--repository`, `--tag`\n- Syntax:\n\n```text\nbuildchain verify artifact <file|dir|url|npm:...|oci:...|github-release:...> [--passport <file-or-url>] [--locator-config <json>] [--repository <owner/repo>] [--tag <tag>] [--npm-registry <url>] [--json]\n```\n\n### `buildchain verify artifact file`\n\n- Help: `buildchain verify artifact file --help`\n- Canonical id: `verify-artifact`\n- Options: `--json`, `--locator-config`, `--npm-registry`, `--passport`, `--repository`, `--tag`\n- Syntax:\n\n```text\nbuildchain verify artifact <file|dir|url|npm:...|oci:...|github-release:...> [--passport <file-or-url>] [--locator-config <json>] [--repository <owner/repo>] [--tag <tag>] [--npm-registry <url>] [--json]\n```\n\n### `buildchain verify artifact github-release:...`\n\n- Help: `buildchain verify artifact github-release:... --help`\n- Canonical id: `verify-artifact`\n- Options: `--json`, `--locator-config`, `--npm-registry`, `--passport`, `--repository`, `--tag`\n- Syntax:\n\n```text\nbuildchain verify artifact <file|dir|url|npm:...|oci:...|github-release:...> [--passport <file-or-url>] [--locator-config <json>] [--repository <owner/repo>] [--tag <tag>] [--npm-registry <url>] [--json]\n```\n\n### `buildchain verify artifact npm:...`\n\n- Help: `buildchain verify artifact npm:... --help`\n- Canonical id: `verify-artifact`\n- Options: `--json`, `--locator-config`, `--npm-registry`, `--passport`, `--repository`, `--tag`\n- Syntax:\n\n```text\nbuildchain verify artifact <file|dir|url|npm:...|oci:...|github-release:...> [--passport <file-or-url>] [--locator-config <json>] [--repository <owner/repo>] [--tag <tag>] [--npm-registry <url>] [--json]\n```\n\n### `buildchain verify artifact oci:...`\n\n- Help: `buildchain verify artifact oci:... --help`\n- Canonical id: `verify-artifact`\n- Options: `--json`, `--locator-config`, `--npm-registry`, `--passport`, `--repository`, `--tag`\n- Syntax:\n\n```text\nbuildchain verify artifact <file|dir|url|npm:...|oci:...|github-release:...> [--passport <file-or-url>] [--locator-config <json>] [--repository <owner/repo>] [--tag <tag>] [--npm-registry <url>] [--json]\n```\n\n### `buildchain verify artifact url`\n\n- Help: `buildchain verify artifact url --help`\n- Canonical id: `verify-artifact`\n- Options: `--json`, `--locator-config`, `--npm-registry`, `--passport`, `--repository`, `--tag`\n- Syntax:\n\n```text\nbuildchain verify artifact <file|dir|url|npm:...|oci:...|github-release:...> [--passport <file-or-url>] [--locator-config <json>] [--repository <owner/repo>] [--tag <tag>] [--npm-registry <url>] [--json]\n```\n\n### `buildchain verify artifact-envelope`\n\n- Help: `buildchain verify artifact-envelope --help`\n- Canonical id: `verify-artifact-envelope`\n- Options: `--assessment-time`, `--expected-contract`, `--expected-issuer`, `--expected-publisher`, `--expected-root`, `--json`\n- Syntax:\n\n```text\nbuildchain verify artifact-envelope <file-or-json> [--assessment-time <epoch>] [--expected-root <sha256:...>] [--expected-issuer <issuer>] [--expected-publisher <publisher>] [--expected-contract <version>] [--json]\n```\n\n### `buildchain verify github-artifact-attestation`\n\n- Help: `buildchain verify github-artifact-attestation --help`\n- Canonical id: `verify-github-artifact-attestation`\n- Options: `--bundle`, `--evidence`, `--json`, `--platform-manifest`, `--release-passport`\n- Syntax:\n\n```text\nbuildchain verify github-artifact-attestation <artifact> --evidence <file> --bundle <file> --platform-manifest <file> --release-passport <file> [--json]\n```\n\n### `buildchain verify infra-contract-evidence-bundle`\n\n- Help: `buildchain verify infra-contract-evidence-bundle --help`\n- Canonical id: `verify-infra-contract-evidence-bundle`\n- Options: `--json`\n- Syntax:\n\n```text\nbuildchain verify infra-contract-evidence-bundle <file> [--json]\n```\n\n### `buildchain verify observability-log`\n\n- Help: `buildchain verify observability-log --help`\n- Canonical id: `verify-observability-log`\n- Options: `--allow-errors`, `--json`, `--min-events`, `--require-component`, `--require-event`, `--require-phase`\n- Syntax:\n\n```text\nbuildchain verify observability-log <jsonl> [--min-events <n>] [--require-phase <csv>] [--require-component <csv>] [--require-event <csv>] [--allow-errors] [--json]\n```\n\n### `buildchain verify publication-admission`\n\n- Help: `buildchain verify publication-admission --help`\n- Canonical id: `verify-publication-admission`\n- Options: `--control-plane-audit-json`, `--expected-json`, `--json`, `--publication-evidence-json`, `--registry-json`, `--runner-json`, `--used-nonce`\n- Syntax:\n\n```text\nbuildchain verify publication-admission <file-or-json> --registry-json <file-or-json> --runner-json <file-or-json> --control-plane-audit-json <file-or-json> --publication-evidence-json <file-or-json> [--expected-json <file-or-json>] [--used-nonce <nonce>]... [--json]\n```\n\n### `buildchain verify release-passport`\n\n- Help: `buildchain verify release-passport --help`\n- Canonical id: `verify-release-passport`\n- Options: `--json`\n- Syntax:\n\n```text\nbuildchain verify release-passport <file-or-url> [--json]\n```\n\n## `version`\n\n### `buildchain version`\n\n- Help: `buildchain version --help`\n- Canonical id: `version`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain version\n```\n\n## `web-surface`\n\n### `buildchain web-surface`\n\n- Help: `buildchain web-surface --help`\n- Canonical id: `web-surface`\n- Options: none declared\n- Syntax:\n\n```text\nbuildchain web-surface ...\n```"
     },
     {
       "id": "manual:consumer-issue-reporting",
@@ -1750,7 +1755,7 @@
       ],
       "maturity": "stable",
       "sourcePath": "docs/dev-alpha-candidate-patrol.md",
-      "digest": "sha256:9f8fa0c89f833fe654cae47c19fcb49ac28c892a16e14e1582e0342c82954e61",
+      "digest": "sha256:293b30f960f6cd6834c0eff2bffaaa5a835783b4a370170cc7b839a0aef5d4d5",
       "headings": [
         {
           "level": 1,
@@ -1763,7 +1768,43 @@
           "anchor": "reusable-workflow"
         }
       ],
-      "markdown": "---\nstatus: preview\nperiod: ongoing\ntheme: dev-alpha-candidate-patrol\ndoc_type: architecture-and-usage\nsource_level: local-files\nconfidence: high\nsensitivity: public\nevidence_grade: A\nreview_state: self-reviewed\nlast_reviewed: 2026-07-29\nai_provenance:\n  model_family: GPT-5\n  product: Codex\n  generated_at: 2026-07-29\n  visible_context: Existing Buildchain source locks, Kungfu exact-source Alpha preflight, Dev Patrol, repository release governance, and the consumer-owned settlement renderer threat model.\n  invisible_context_boundary: No credentials, private logs, or private configuration were used.\n---\n\n# Dev to Alpha Candidate Patrol\n\nBuildchain provides a reusable observation and single-flight PR controller for\nrepositories that promote a development branch into a protected Alpha branch.\nIt does not publish Alpha. The read-only observer reads the exact heads of both\nbranches, walks the\nbounded development history from newest to oldest (stopping early at the Alpha\nhead), and selects the newest commit that satisfies all of these conditions:\n\n- the source is strictly ahead of the recorded target head;\n- the latest completed Dev Patrol for that exact commit SHA succeeded;\n- the latest completed Alpha preflight for the same commit SHA succeeded; and\n- both runs are within the caller's evidence age limit.\n\nThe selected commit can be behind the observed development head when newer\ncommits have not completed both workflows yet. The decision binds the observed\nhead, selected SHA, and count of skipped newer commits. This makes a slow native\nverification lane live under continuous development without silently treating\nan unqualified head as releasable.\n\nHistory discovery is bounded to the newest 1000 development commits. The\ncontroller then compares the selected SHA to the exact Alpha head before it can\nbe eligible, so a bounded scan cannot turn a commit outside the promotion\nancestry into a candidate.\n\nThe decision is `kungfu-buildchain-channel-candidate-decision/v1`. It records the\nsource and target branches and SHAs, comparison distance, workflow paths, run\nidentities and attempts, completion times, URLs, policy, and a canonical decision\nroot. Missing, stale, failed, duplicate, or source-mismatched evidence fails\nclosed as an auditable `blocked` or `stale` observation and cannot enter\nsettlement.\n\nThe companion state is\n`kungfu-buildchain-dev-alpha-candidate-state/v1`. Its current state is one of:\n\n- `observed`: no exact candidate is currently settleable;\n- `eligible-for-settlement`: a qualified candidate exists and no managed Alpha\n  candidate PR is active;\n- `active`: exactly one managed candidate PR is open;\n- `retained-next`: an active PR remains authoritative and the newest different\n  qualified SHA is retained as `nextCandidate`;\n- `stale`: the available exact-SHA evidence pair is outside policy age; or\n- `blocked`: qualification or reconciliation failed closed.\n\nWhen a newer qualified SHA replaces an earlier `nextCandidate`, the state also\nrecords that earlier SHA as `supersededCandidate`. Every state carries exact\nrepository, source/target refs and SHAs, workflow-run evidence through the\ncandidate decision, and canonical decision/state roots.\n\n## Reusable workflow\n\nCall `.github/workflows/dev-alpha-candidate-patrol.yml` from a thin repository\nworkflow. Start with `dry-run: true`. The reusable workflow always runs an\n`observe` job with only Actions/content/pull-request read permissions. Once the\nrepository has proven that its two workflow names and branch topology produce\nexact same-SHA evidence, it may set `settlement-authorized: true` and\n`dry-run: false`. The older `create-pull-request` input remains a compatibility\nalias for settlement authorization.\n\nRepositories whose promotion policy requires a machine-readable PR declaration\ncan pass static text through `pull-request-body-prefix`. When the declaration\ndepends on the exact qualified delta, use `pull-request-body-prefix-renderer`\ninstead. It names a repository-relative Node.js file in the consumer checkout.\nThe read-only `observe` job checks out the selected SHA with credentials disabled,\nruns the renderer with a reduced environment, and requires it to write UTF-8 text\nto `BUILDCHAIN_CHANNEL_PATROL_PR_BODY_PREFIX_OUTPUT`. The renderer also receives\nthe selected SHA plus source and target branch names. It may derive a declaration\nfrom the exact checkout and `origin/<target-branch>` without receiving the\npromotion token.\n\nStatic and rendered prefixes are mutually exclusive. A renderer failure, path\nescape, source-SHA mismatch, empty or oversized result, invalid UTF-8, or managed\ncontroller-marker injection fails before the write-permission job can run. The\nrendered bytes are retained with the read-only observation artifact and passed\nto `settle` as a job output, so the candidate PR is created with the correct\ndeclaration on its first write. Buildchain preserves that repository-owned text\nwhen later observations update only the managed state marker. Before any write,\n`settle` also requires its fresh observation to select the same SHA that produced\nthe rendered bytes. Concurrent qualification progress therefore fails closed\nand is recomputed by the next patrol instead of attaching a declaration to the\nwrong candidate.\n\nThe separately permissioned `settle` job re-runs the exact observation before\nany write. With no active managed candidate, it creates one branch named from\nthe target branch and the first 12 characters of the full source SHA. An\nexisting branch must point to the same full SHA or the run fails. With one\nactive managed candidate, it only updates the machine-readable state marker in\nthat PR body so repeated events and rapid dev progress cannot create another\ncandidate PR or another heavy candidate build. Foreign human-authored Alpha PRs\nare ignored. More than one open Buildchain-managed candidate fails closed.\n\nThe PR body is the bounded durable controller state: it preserves the active\ncandidate and newest retained `nextCandidate` without introducing an always-on\nservice. Once the active PR settles or is abandoned, the next execution\nrecomputes current exact-SHA qualification and creates only the newest still\nfresh candidate. It never trusts a `workflow_run` trigger SHA as evidence.\n\nConsumers should invoke this workflow after relevant qualification workflow\ncompletion and from an offset periodic fallback. GitHub may delay scheduled\nruns, so the event path supplies low latency while the fallback supplies\nrecovery. Workflow concurrency plus the server-side open-PR reconciliation\nmakes duplicate or delayed events idempotent.\n\nThe workflow never moves the Alpha ref directly, merges or auto-merges the pull\nrequest, publishes npm, creates a Git tag or GitHub Release, or changes branch\nprotection. Those remain repository-owned protected settlement actions."
+      "markdown": "---\nstatus: preview\nperiod: ongoing\ntheme: dev-alpha-candidate-patrol\ndoc_type: architecture-and-usage\nsource_level: local-files\nconfidence: high\nsensitivity: public\nevidence_grade: A\nreview_state: self-reviewed\nlast_reviewed: 2026-08-03\nai_provenance:\n  model_family: GPT-5\n  product: Codex\n  generated_at: 2026-07-29\n  visible_context: Existing Buildchain source locks, Kungfu exact-source Alpha preflight, Dev Patrol, protected auto-merge policy, repository release governance, and the consumer-owned settlement renderer threat model.\n  invisible_context_boundary: No credentials, private logs, or private configuration were used.\n---\n\n# Dev to Alpha Candidate Patrol\n\nBuildchain provides a reusable observation and single-flight PR controller for\nrepositories that promote a development branch into a protected Alpha branch.\nIt does not publish Alpha. The read-only observer reads the exact heads of both\nbranches, walks the\nbounded development history from newest to oldest (stopping early at the Alpha\nhead), and selects the newest commit that satisfies all of these conditions:\n\n- the source is strictly ahead of the recorded target head;\n- the latest completed Dev Patrol for that exact commit SHA succeeded;\n- the latest completed Alpha preflight for the same commit SHA succeeded; and\n- both runs are within the caller's evidence age limit.\n\nThe selected commit can be behind the observed development head when newer\ncommits have not completed both workflows yet. The decision binds the observed\nhead, selected SHA, and count of skipped newer commits. This makes a slow native\nverification lane live under continuous development without silently treating\nan unqualified head as releasable.\n\nHistory discovery is bounded to the newest 1000 development commits. The\ncontroller then compares the selected SHA to the exact Alpha head before it can\nbe eligible, so a bounded scan cannot turn a commit outside the promotion\nancestry into a candidate.\n\nThe decision is `kungfu-buildchain-channel-candidate-decision/v1`. It records the\nsource and target branches and SHAs, comparison distance, workflow paths, run\nidentities and attempts, completion times, URLs, policy, and a canonical decision\nroot. Missing, stale, failed, duplicate, or source-mismatched evidence fails\nclosed as an auditable `blocked` or `stale` observation and cannot enter\nsettlement.\n\nThe companion state is\n`kungfu-buildchain-dev-alpha-candidate-state/v1`. Its current state is one of:\n\n- `observed`: no exact candidate is currently settleable;\n- `eligible-for-settlement`: a qualified candidate exists and no managed Alpha\n  candidate PR is active;\n- `active`: exactly one managed candidate PR is open;\n- `retained-next`: an active PR remains authoritative and the newest different\n  qualified SHA is retained as `nextCandidate`;\n- `stale`: the available exact-SHA evidence pair is outside policy age; or\n- `blocked`: qualification or reconciliation failed closed.\n\nWhen a newer qualified SHA replaces an earlier `nextCandidate`, the state also\nrecords that earlier SHA as `supersededCandidate`. Every state carries exact\nrepository, source/target refs and SHAs, workflow-run evidence through the\ncandidate decision, and canonical decision/state roots.\n\n## Reusable workflow\n\nCall `.github/workflows/dev-alpha-candidate-patrol.yml` from a thin repository\nworkflow. Start with `dry-run: true`. The reusable workflow always runs an\n`observe` job with only Actions/content/pull-request read permissions. Once the\nrepository has proven that its two workflow names and branch topology produce\nexact same-SHA evidence, it may set `settlement-authorized: true` and\n`dry-run: false`. The older `create-pull-request` input remains a compatibility\nalias for settlement authorization.\n\nRepositories whose promotion policy requires a machine-readable PR declaration\ncan pass static text through `pull-request-body-prefix`. When the declaration\ndepends on the exact qualified delta, use `pull-request-body-prefix-renderer`\ninstead. It names a repository-relative Node.js file in the consumer checkout.\nThe read-only `observe` job checks out the selected SHA with credentials disabled,\nruns the renderer with a reduced environment, and requires it to write UTF-8 text\nto `BUILDCHAIN_CHANNEL_PATROL_PR_BODY_PREFIX_OUTPUT`. The renderer also receives\nthe selected SHA plus source and target branch names. It may derive a declaration\nfrom the exact checkout and `origin/<target-branch>` without receiving the\npromotion token.\n\nStatic and rendered prefixes are mutually exclusive. A renderer failure, path\nescape, source-SHA mismatch, empty or oversized result, invalid UTF-8, or managed\ncontroller-marker injection fails before the write-permission job can run. The\nrendered bytes are retained with the read-only observation artifact and passed\nto `settle` as a job output, so the candidate PR is created with the correct\ndeclaration on its first write. Buildchain preserves that repository-owned text\nwhen later observations update only the managed state marker. Before any write,\n`settle` also requires its fresh observation to select the same SHA that produced\nthe rendered bytes. Concurrent qualification progress therefore fails closed\nand is recomputed by the next patrol instead of attaching a declaration to the\nwrong candidate.\n\nThe separately permissioned `settle` job re-runs the exact observation before\nany write. With no active managed candidate, it creates one branch named from\nthe target branch and the first 12 characters of the full source SHA. An\nexisting branch must point to the same full SHA or the run fails. With one\nactive managed candidate, it only updates the machine-readable state marker in\nthat PR body so repeated events and rapid dev progress cannot create another\ncandidate PR or another heavy candidate build. Foreign human-authored Alpha PRs\nare ignored. More than one open Buildchain-managed candidate fails closed.\n\nThe PR body is the bounded durable controller state: it preserves the active\ncandidate and newest retained `nextCandidate` without introducing an always-on\nservice. Once the active PR settles or is abandoned, the next execution\nrecomputes current exact-SHA qualification and creates only the newest still\nfresh candidate. It never trusts a `workflow_run` trigger SHA as evidence.\n\nThe caller may additionally set `auto-merge: true` and choose `merge-method`\nfrom `merge`, `squash`, or `rebase`. Buildchain only arms GitHub auto-merge for\nthe single managed, open, exact-source candidate after the write-permission\nsettlement has revalidated the observation. GitHub still owns every required\nreview, required check, branch-protection, and merge-queue gate; Buildchain does\nnot approve or directly merge the PR. Invalid merge methods and GraphQL\nrefusals fail the patrol run.\n\nConsumers should invoke this workflow after relevant qualification workflow\ncompletion and from an offset periodic fallback. GitHub may delay scheduled\nruns, so the event path supplies low latency while the fallback supplies\nrecovery. Workflow concurrency plus the server-side open-PR reconciliation\nmakes duplicate or delayed events idempotent.\n\nThe workflow never moves the Alpha ref directly, directly merges the pull\nrequest, approves it, publishes npm, creates a Git tag or GitHub Release, or\nchanges branch protection. Optional auto-merge only registers repository-owned\nintent with GitHub; protected settlement remains authoritative."
+    },
+    {
+      "id": "manual:dev-qualification-patrol",
+      "title": "Dev Qualification Patrol",
+      "route": "/docs/dev-qualification-patrol",
+      "category": "manual",
+      "capabilityGroup": "getting-started",
+      "audience": [
+        "agent"
+      ],
+      "maturity": "stable",
+      "sourcePath": "docs/dev-qualification-patrol.md",
+      "digest": "sha256:656298caae798479653f2b46c4d4dad684fdbcc67c3ffa384f436339434fbe21",
+      "headings": [
+        {
+          "level": 1,
+          "title": "Dev Qualification Patrol",
+          "anchor": "dev-qualification-patrol"
+        },
+        {
+          "level": 2,
+          "title": "Exact-source and priority contract",
+          "anchor": "exact-source-and-priority-contract"
+        },
+        {
+          "level": 2,
+          "title": "Bounded local retry",
+          "anchor": "bounded-local-retry"
+        },
+        {
+          "level": 2,
+          "title": "Permission and mutation boundary",
+          "anchor": "permission-and-mutation-boundary"
+        }
+      ],
+      "markdown": "---\nstatus: preview\nperiod: ongoing\ntheme: dev-qualification-patrol\ndoc_type: architecture-and-usage\nsource_level: local-files\nconfidence: high\nsensitivity: public\nevidence_grade: A\nreview_state: self-reviewed\nlast_reviewed: 2026-08-03\nai_provenance:\n  model_family: GPT-5\n  product: Codex\n  generated_at: 2026-08-03\n  visible_context: Existing Buildchain Shifu Gate receipts, Kungfu Dev Patrol, Alpha preflight, candidate patrol, and GitHub failed-job rerun semantics.\n  invisible_context_boundary: No credentials, private logs, or private configuration were used.\n---\n\n# Dev Qualification Patrol\n\nBuildchain provides a reusable controller for repositories whose development\nbranch advances faster than a heavy cross-platform qualification workflow can\nsettle. The controller keeps no external queue. On every wakeup it derives the\nonly pending item from the current source-branch head and maintains these\nstates:\n\n- `qualified`: the current source SHA already has a successful Dev run;\n- `running`: one Dev run is active, with a different current SHA retained as\n  the implicit latest pending item;\n- `waiting-preflight`: the current SHA has not passed its lightweight exact-SHA\n  preflight;\n- `waiting-priority`: a declared Alpha or release workflow is queued or active;\n- `dispatch-ready`: the latest SHA is preflight-qualified and no Dev or\n  priority run is active;\n- `retry-ready`: the latest exact-SHA Dev run failed only at a classified\n  external boundary and remains inside the attempt limit; or\n- `blocked`: the failure was deterministic, unknown, or exhausted its bounded\n  retry policy.\n\nThis is an event-driven, coalescing controller rather than a FIFO build queue.\nIf ten commits arrive during one slow Dev run, the next reconciliation observes\nonly the newest branch head. Intermediate unqualified SHAs are superseded\nwithout consuming the shared native runners.\n\n## Exact-source and priority contract\n\nCall `.github/workflows/dev-qualification-patrol.yml` from a thin consumer\nworkflow after the lightweight preflight, Dev Patrol, and declared priority\nworkflows complete. Add an offset schedule as recovery for delayed or missed\nGitHub events. Repeated wakeups are idempotent.\n\nThe controller requires a successful preflight whose `head_sha` equals the\ncurrent source head. It dispatches the heavy workflow on the source branch and\nadds a controller-owned `source-sha` input. The consumer must reject the run\nbefore qualification if that input differs from the workflow event SHA. This\ncloses the race where the branch advances between observation and workflow\nstartup. The heavy reusable Gate workflow then receives the exact SHA as its\n`source-ref`, so every platform receipt remains source-bound.\n\n`priority-workflows-json` is a JSON array of workflow paths. Any queued,\nwaiting, pending, requested, or in-progress run in those workflows prevents a\nnew Dev dispatch or automatic retry. This lets Alpha and release work keep\npriority on shared self-hosted runners. A successful current Dev result remains\nqualified even when priority work is active; priority only governs new heavy\nwork.\n\n## Bounded local retry\n\nThe controller uses GitHub's failed-jobs rerun endpoint, not a fresh workflow\ndispatch, for classified transient failures. Successful matrix jobs and their\nexact-source receipts remain in the same workflow-run transaction. Failed jobs\nand dependent aggregation run again. The Shifu Gate profile uploads platform,\ndiagnostic, aggregate, and controller artifacts with overwrite enabled so a\nlater attempt can replace only the same-run artifact names.\n\nAutomatic retry is deliberately narrow:\n\n- whole-run `cancelled`, `timed_out`, or `startup_failure` conclusions qualify;\n- checkout, setup, toolchain, download, upload, environment exposure, and\n  runner-workspace reset steps qualify;\n- Gate execution, Gate enforcement, aggregation, and controller-receipt\n  failures never qualify; and\n- an unknown failing step fails closed.\n\n`max-attempts` counts the original attempt. The default `2` therefore permits\nat most one automatic failed-jobs rerun. This policy reduces retry friction for\nnetwork, runner, and provider failures without laundering a product or Gate\nfailure into an infrastructure retry.\n\n## Permission and mutation boundary\n\nThe reusable workflow always performs `observe` with Actions and contents read\npermissions. The separate `mutate` job runs only when the observation proposes\n`dispatch` or `rerun-failed-jobs`, `mutation-authorized` is true, and `dry-run`\nis false. Before writing, it re-resolves the branch and all workflow state and\nrequires the action and source SHA to match the read-only observation. A race\nfails closed and the next event recomputes from current truth.\n\nStart a consumer in dry-run mode. Its observation and mutation decisions are\nretained as exact-source artifacts with a canonical decision root. Enabling\nmutation requires a repository token that can write Actions; no contents,\npull-request, tag, release, package, or publication permission is used.\n\nThe controller does not merge a PR, publish an Alpha, create a tag, create a\nrelease, or settle a Release Passport. Once Dev and Alpha preflight evidence\nboth succeed for one SHA, the separate\n[Dev to Alpha Candidate Patrol](dev-alpha-candidate-patrol.md) may select it."
     },
     {
       "id": "manual:getting-started",
@@ -2296,7 +2337,7 @@
       ],
       "maturity": "stable",
       "sourcePath": "docs/MAP.md",
-      "digest": "sha256:0731b18f6a7aa6a164197080fac3b57ff161640a28433c4cd26adcf145403fb5",
+      "digest": "sha256:216e69758e78866e5a22fae1c4d017aaccf1b759937fcd953934407263344c03",
       "headings": [
         {
           "level": 1,
@@ -2329,7 +2370,7 @@
           "anchor": "how-this-map-is-maintained"
         }
       ],
-      "markdown": "---\nstatus: active\nperiod: ongoing\ntheme: buildchain-documentation-map\ndoc_type: technical-reference\nsource_level: local-files\nconfidence: high\nsensitivity: public\nevidence_grade: A\nreview_state: unreviewed\nlast_reviewed: 2026-07-31\nai_provenance:\n  model_family: GPT-5\n  product: Codex\n  generated_at: 2026-07-31\n  invisible_context: not asserted\n---\n\n# Documentation Map\n\nStart here. Find the question you have; follow it to the document that answers\nit. This map is meant to be readable by both a person skimming for the right doc\nand an agent grounding a specific claim.\n\nEach row carries a **plane** - *why* (intent / rationale), *verify* (trust the\nrunning artifact), *use* (consume / extend) - and a **status**:\n\n- `stable` - current and holds.\n- `draft` - exists, rough or incomplete.\n- `to write` - planned; the material exists but is not yet a single doc.\n- `retired` - intentionally not part of the active Buildchain v3 surface.\n\n## Start by Role or Intent\n\n| Role or intent | First entry | Then |\n| --- | --- | --- |\n| First-time repository adopter | [Golden Path](getting-started.md) | [Lifecycle Protocol](lifecycle-protocol.md) only when the generated defaults need changes |\n| CLI operator or agent | [Generated CLI Reference](cli-reference.md) | [CLI guide](cli.md) for concepts and worked examples |\n| Node toolkit developer | [Generated Node API Reference](node-api-reference.md) | [Core package guide](../packages/core/README.md) for recipes |\n| Build/release operator | [Reusable Build Surface](reusable-build-surface.md) | [Release Flow](release-flow.md) and [Release Passport](release-passport.md) |\n| Product/trust reviewer | [Product Mechanism](product-mechanism.md) | [Release Passport](release-passport.md) and [KFD Support](kfd-support.md) |\n\nThese entrypoints keep common destinations within three meaningful hops:\nREADME or this map, the role entry, and the normative contract or generated\nreference.\n\n## Capability Coverage\n\nThis package should be usable by an agent from the npm artifact alone. The\nmachine-readable `dist/site/` bundle is the first fact source; the Markdown\nmanuals explain those facts and give operator examples.\n\n`dist/site/capability-registry.json` is the capability navigation entrypoint.\nIt groups the public surface into stable product areas so sites and agents do\nnot have to infer structure from file names. Each page, manual, CLI command,\nworkflow, action, and Node API export also carries a `capabilityGroup`,\n`audience`, and `maturity` field in its own registry.\n\n| Capability group | Primary facts | Primary manuals |\n| --- | --- | --- |\n| Getting Started | `capability-registry.json`, `product-mechanism.json` | [`getting-started.md`](getting-started.md), [`install.md`](install.md), [`product-mechanism.md`](product-mechanism.md), [`cli.md`](cli.md) |\n| Release Passport and Trust | `release-model.json`, `artifact-schemas.json`, `publication-authority-registry.json`, `kfd-claims.json` | [`release-passport.md`](release-passport.md), [`github-artifact-attestation.md`](github-artifact-attestation.md), [`publication-authority.md`](publication-authority.md), [`release-candidate.md`](release-candidate.md), [`publish-transaction.md`](publish-transaction.md), [`binary-distribution.md`](binary-distribution.md) |\n| Reusable Build and Lifecycle | `workflow-registry.json`, `controller-registry.json`, `release-model.json` | [`reusable-build-surface.md`](reusable-build-surface.md), [`controller-evidence.md`](controller-evidence.md), [`shifu-gate-profiles.md`](shifu-gate-profiles.md), [`lifecycle-protocol.md`](lifecycle-protocol.md) |\n| KFD Trust and Surface Closure | `kfd-claims.json`, `public-surface-audit.json`, `cli-registry.json`, `node-api-registry.json` | [`kfd-support.md`](kfd-support.md), [`release-passport.md`](release-passport.md) |\n| Site Bundle, Web Surfaces, and Propagation | `buildchain-site.json`, `site-manifest.json`, `page-registry.json`, `release-model.json` | [`site-bundle-contract.md`](site-bundle-contract.md), [`web-surface-deployments.md`](web-surface-deployments.md), [`release-propagation.md`](release-propagation.md) |\n| Publication Artifacts | `publication-registry.json`, `workflow-registry.json`, `node-api-registry.json`, `manual-registry.json`, `kungfu-buildchain-publication-artifact-registry` | [`publication-artifacts.md`](publication-artifacts.md), [`reusable-build-surface.md`](reusable-build-surface.md) |\n| Distribution Indexes and Badges | `badge-endpoint-registry.json`, `node-api-registry.json`, `manual-registry.json` | [`readme-badges.md`](readme-badges.md), [`homebrew.md`](homebrew.md) |\n| Build Facts, Observability, and Diagnostics | `cli-registry.json`, `node-api-registry.json`, lifecycle artifacts | [`build-facts.md`](build-facts.md), [`toolkit-observability.md`](toolkit-observability.md), [`consumer-issue-reporting.md`](consumer-issue-reporting.md) |\n| Governance, Versioning, and Runtime Drift | `buildchain-contract.json`, `workflow-registry.json`, `release-model.json` | [`github-governance-authority.md`](github-governance-authority.md), [`release-governance.md`](release-governance.md), [`release-flow.md`](release-flow.md), [`versioning.md`](versioning.md), [`runtime-train-validation.md`](runtime-train-validation.md), [`cli.md`](cli.md) |\n| CLI and Node API Reference | `cli-registry.json`, `node-api-registry.json`, `workflow-registry.json`, `manual-registry.json` | [`cli-reference.md`](cli-reference.md), [`node-api-reference.md`](node-api-reference.md), [`cli.md`](cli.md), [`../packages/core/README.md`](../packages/core/README.md) |\n\n| Capability | Machine-readable entry | Manual entry |\n| --- | --- | --- |\n| Capability-grouped KFD navigation | `dist/site/capability-registry.json`, `dist/site/page-registry.json`, `dist/site/manual-registry.json`, `dist/site/cli-registry.json`, `dist/site/node-api-registry.json` | this map, [`site-bundle-contract.md`](site-bundle-contract.md), [`kfd-support.md`](kfd-support.md) |\n| KFD-1 / KFD-2 / KFD-3 release-passport gates | `dist/site/kfd-claims.json`, `dist/site/buildchain-contract.json`, `dist/site/artifact-schemas.json` | [`release-passport.md`](release-passport.md) |\n| Product invariant Passport release gate | `buildchain.release.json#invariantPassports`, `dist/site/buildchain-contract.json` | [`release-passport.md`](release-passport.md) |\n| GitHub keyless Linux artifact attestation | `buildchain.release.json#githubArtifactAttestations`, `dist/site/workflow-registry.json`, `dist/site/artifact-schemas.json` | [`github-artifact-attestation.md`](github-artifact-attestation.md) |\n| Declarative cross-platform artifact signing | `kungfu-buildchain-artifact-signing-request/v1`, `kungfu-buildchain-artifact-signing-result/v1` | [`reusable-build-surface.md`](reusable-build-surface.md#artifact-signing-authority) |\n| KFD-3 public surface reverse audit | `dist/site/public-surface-audit.json`, `dist/site/cli-registry.json`, `dist/site/workflow-registry.json`, `dist/site/page-registry.json` | [`cli.md`](cli.md), [`site-bundle-contract.md`](site-bundle-contract.md) |\n| KFD-1 / KFD-2 / KFD-3 first-class CLI and Node API | `.buildchain/kfd/kfd-3/surfaces.json`, `dist/site/kfd-claims.json`, `buildchain.release.json`, KFD schemas from `@kungfu-tech/kfd` | [`kfd-support.md`](kfd-support.md), [`cli.md`](cli.md#commands) |\n| Declarative KFD Agent Hub adapter conformance and Passport evidence | `.buildchain/kfd/agent-hub.json`, `.buildchain/artifacts/kfd-agent-hub/evidence.json`, `buildchain.release.json#kfdAgentHub` | [`kfd-agent-hub.md`](kfd-agent-hub.md) |\n| Floating `@v3` drift detection and compatibility issues | `dist/site/buildchain-contract.json` | [`reusable-build-surface.md`](reusable-build-surface.md#floating-ref-contract-lock) |\n| npm publish transactions, evidence, dist-tags, and recovery | `dist/site/release-model.json`, `dist/site/artifact-schemas.json` | [`publish-transaction.md`](publish-transaction.md) |\n| Git/source/version/module/product build facts | `dist/site/node-api-registry.json`, `dist/site/cli-registry.json`, `kungfu-buildchain-module-build-facts`, `kungfu-buildchain-product-build-facts` | [`build-facts.md`](build-facts.md) |\n| GitHub Release passport/evidence publication | `dist/site/release-model.json`, `dist/site/artifact-schemas.json` | [`release-governance.md`](release-governance.md), [`release-candidate.md`](release-candidate.md) |\n| GitHub ownership, effective protection, plan capability, and managed-zone governance receipts | `dist/site/node-api-registry.json`, `dist/site/cli-registry.json`, `kungfu-buildchain-github-governance-receipt` | [`github-governance-authority.md`](github-governance-authority.md) |\n| release propagation for package/publication/site chains | `dist/site/release-model.json` | [`release-propagation.md`](release-propagation.md) |\n| publication artifact manifests, immutable archive registries, source bundles, and paper repository workflows | `dist/site/publication-registry.json`, `dist/site/workflow-registry.json`, `dist/site/node-api-registry.json`, `kungfu-buildchain-publication-artifact-manifest`, `kungfu-buildchain-publication-artifact-registry` | [`publication-artifacts.md`](publication-artifacts.md) |\n| Generated badge bundles, README badge blocks, and badge facts | `dist/site/node-api-registry.json`, `dist/site/manual-registry.json`, `kungfu-buildchain-badge-bundle-facts`, `kungfu-buildchain-readme-badge-facts` | [`readme-badges.md`](readme-badges.md) |\n| Homebrew tap distribution indexes | `dist/site/node-api-registry.json`, `dist/site/buildchain-contract.json` | [`homebrew.md`](homebrew.md) |\n| Buildchain CLI manual | `dist/site/cli-registry.json`, `dist/site/manual-registry.json` | [`cli.md`](cli.md) |\n| Node API / package exports | `dist/site/node-api-registry.json`, `dist/site/release-provenance.json` | [`cli.md`](cli.md#node-api-and-package-exports) |\n\n`dist/site/kfd-claims.json` is generated from\n`packages/core/buildchain-kfd-claims.js`. Treat that module and JSON file as the\nsource claim registry; this map and the manuals explain those claims but do not\nreplace them.\n\n## Map\n\n| Your question | Document | Plane | Status |\n| --- | --- | --- | --- |\n| What is Buildchain, in one idea? | [`../README.md`](../README.md) | - | stable |\n| How do I complete a first clean adoption in 15–30 minutes? | [`getting-started.md`](getting-started.md) | use | stable |\n| Why is Buildchain a Release Passport mechanism rather than a generic workflow collection? | [`product-mechanism.md`](product-mechanism.md) | why | stable |\n| How do agents and contributors enter this repo? | [`../AGENTS.md`](../AGENTS.md) + [`../CONTRIBUTING.md`](../CONTRIBUTING.md) | use | stable |\n| How do I install a standalone binary or npm package? | [`install.md`](install.md) | use | stable |\n| How do I run or look up the `buildchain` CLI? | [`cli-reference.md`](cli-reference.md) + [`cli.md`](cli.md) | use | stable |\n| How do I import Buildchain toolkit APIs from JavaScript build code? | [`node-api-reference.md`](node-api-reference.md) + [`../packages/core/README.md`](../packages/core/README.md) | use | stable |\n| How do I initialize a new repository? | [`getting-started.md`](getting-started.md) + [`lifecycle-protocol.md`](lifecycle-protocol.md) | use | stable |\n| Why does Buildchain use branch-driven release governance? | [`release-governance.md`](release-governance.md) | why | stable |\n| How do protected dev branches and scheduled ready-PR merging work? | [`release-governance.md`](release-governance.md#protected-dev-branches) | use | stable |\n| How do slow required checks land reliably on a busy dev channel? | [`release-governance.md`](release-governance.md#protected-dev-branches) + [`cli.md`](cli.md#commands) | use | preview |\n| How do I run daily, weekly, or monthly repository patrols? | [`release-governance.md`](release-governance.md#buildchain-patrol) | use | stable |\n| How does Buildchain decide patch, minor, and major release lines? | [`versioning.md`](versioning.md) | why | stable |\n| What exact branch/tag state machine runs on alpha, release, and major gate? | [`release-flow.md`](release-flow.md) | verify | stable |\n| What did Buildchain migrate or retire from old action repositories? | [`migration-inventory.md`](migration-inventory.md) | verify | stable |\n| What is the active action and workflow source of truth? | [`ownership.md`](ownership.md) | verify | stable |\n| How do I declare version files and custom lifecycle commands? | [`lifecycle-protocol.md`](lifecycle-protocol.md) | use | stable |\n| How does publish evidence, recovery, and finalization work? | [`publish-transaction.md`](publish-transaction.md) | verify | stable |\n| How do I collect and verify module/product build facts from Git source, version files, and outputs? | [`build-facts.md`](build-facts.md) + [`cli.md`](cli.md) | use/verify | stable |\n| How do I publish or verify release passport artifacts? | [`release-passport.md`](release-passport.md) | use | stable |\n| How do I keylessly attest Linux release artifacts with GitHub and bind them to a Release Passport? | [`github-artifact-attestation.md`](github-artifact-attestation.md) | verify/use | preview |\n| How do I request detached, Developer ID, or Authenticode signing without consumer credentials? | [`reusable-build-surface.md`](reusable-build-surface.md#artifact-signing-authority) | verify/use | preview |\n| How do I seal exact artifact, identity, lifecycle, and KFD assessment roots for KFX admission? | [`artifact-verification-envelope.md`](artifact-verification-envelope.md) | verify/use | preview |\n| How is product publication authority sealed to an exact workflow, runner, control plane, nonce, and artifact? | [`publication-authority.md`](publication-authority.md) | verify | preview |\n| How are GitHub ownership, independent review, effective protection, and plan capability audited fail-closed? | [`github-governance-authority.md`](github-governance-authority.md) | verify | preview |\n| How do I gate release artifacts with KFD-1 contract-world witnesses? | [`release-passport.md`](release-passport.md#kfd-1-contract-world-release-gate) | verify/use | stable |\n| How do I declare, render, and audit product KFD-2 release trust claims? | [`kfd-support.md`](kfd-support.md#kfd-2) + [`release-passport.md`](release-passport.md#kfd-2-release-trust-passport-audit) + [`cli.md`](cli.md) | verify/use | stable |\n| How do I gate KFD-3 collaboration-interface releases? | [`release-passport.md`](release-passport.md#kfd-3-collaboration-interface-release-gate) + [`cli.md`](cli.md) | verify/use | stable |\n| How do I detect, register, audit, witness, or query KFD-3 product surfaces? | [`kfd-support.md`](kfd-support.md) + [`cli.md`](cli.md) | verify/use | stable |\n| How do I adopt the KFD Agent Hub profile with one declaration and one adapter? | [`kfd-agent-hub.md`](kfd-agent-hub.md) | verify/use | preview |\n| How do I keep `@v3` floating refs while detecting Buildchain contract drift? | [`reusable-build-surface.md`](reusable-build-surface.md#floating-ref-contract-lock) | verify/use | stable |\n| How do reusable workflows bind controller intent, source/runtime identity, outcomes, and receipt evidence? | [`controller-evidence.md`](controller-evidence.md) | verify/use | draft |\n| How does an Agent propagate a finalized upstream release through downstream PR, deployment, production readback, and Work Control completion? | [`release-propagation.md`](release-propagation.md) | use/verify | preview |\n| How do paper or report repositories publish PDFs, metadata, source bundles, site-consumable manifests, npm packages, and GitHub Releases? | [`publication-artifacts.md`](publication-artifacts.md) | use | stable |\n| How do I generate KFD / Release Passport badge bundles without hand-maintaining Markdown? | [`readme-badges.md`](readme-badges.md) + [`cli.md`](cli.md) | use | stable |\n| How do I generate and verify a Homebrew tap from release passport evidence? | [`homebrew.md`](homebrew.md) + [`cli.md`](cli.md) | use/verify | stable |\n| How do I prove a PR-stage reusable build is the artifact source promoted later? | [`release-candidate.md`](release-candidate.md) + [`reusable-build-surface.md`](reusable-build-surface.md) | verify | stable |\n| Why are binary release assets archived by platform, and where is the single bundle? | [`binary-distribution.md`](binary-distribution.md) | verify | stable |\n| How do I add timestamped logs inside build scripts? | [`toolkit-observability.md`](toolkit-observability.md) | use | stable |\n| What package-owned facts should buildchain.libkungfu.dev render? | [`site-bundle-contract.md`](site-bundle-contract.md) | use | stable |\n| How do I call the reusable build workflow? | [`reusable-build-surface.md`](reusable-build-surface.md) | use | stable |\n| How does Buildchain schedule and aggregate a project-owned Shifu Gate profile? | [`shifu-gate-profiles.md`](shifu-gate-profiles.md) | use/verify | draft |\n| How do exact build artifacts become qualified, transcript-traceable demo media? | [`auditable-demo.md`](auditable-demo.md) | use/verify | draft |\n| How do I use one build job that follows alpha during development and stable for releases? | [`reusable-build-surface.md`](reusable-build-surface.md#automatic-channel-router) | use | preview |\n| How do self-hosted runners relay large artifacts through S3 before GitHub artifacts? | [`reusable-build-surface.md`](reusable-build-surface.md#artifact-transfer-relay) | use | stable |\n| How do self-hosted runners reuse local Git checkout caches without weakening source locks? | [`reusable-build-surface.md`](reusable-build-surface.md#locked-source-checkout-cache) | use | stable |\n| How do ephemeral GitHub-hosted runners share exact dependency or compiler caches without fixed-runner affinity? | [`cli.md`](cli.md#commands) | use/verify | preview |\n| How do I validate an unreleased Buildchain runtime train while keeping `@v3`? | [`runtime-train-validation.md`](runtime-train-validation.md) | use | stable |\n| How do I automatically qualify alpha candidates and publish the newest non-revoked qualified candidate at a fixed window? | [`stable-candidate-patrol.md`](stable-candidate-patrol.md) | use | preview |\n| How do I deploy a site/app preview, staging, or production surface? | [`web-surface-deployments.md`](web-surface-deployments.md) | use | stable |\n| How do I publish observed infrastructure contracts for downstream consumers? | [`infra-contract.md`](infra-contract.md) | use | preview |\n| How do I use the active actions directly? | [`../actions/validate-config/README.md`](../actions/validate-config/README.md), [`../actions/run-lifecycle/README.md`](../actions/run-lifecycle/README.md), [`../actions/promote-buildchain-ref/README.md`](../actions/promote-buildchain-ref/README.md), [`../actions/report-buildchain-issue/README.md`](../actions/report-buildchain-issue/README.md), [`../actions/github-artifact-attestation/README.md`](../actions/github-artifact-attestation/README.md), [`../actions/macos-credential-island/README.md`](../actions/macos-credential-island/README.md); `dist/site/workflow-registry.json#actions` is authoritative for the six-entry inventory. | use | stable |\n| How can a consumer workflow report a Buildchain-owned failure back to Buildchain? | [`consumer-issue-reporting.md`](consumer-issue-reporting.md) + [`../actions/report-buildchain-issue/README.md`](../actions/report-buildchain-issue/README.md) | use | stable |\n| What do the fixture repositories demonstrate? | [`../fixtures/libnode-shaped/README.md`](../fixtures/libnode-shaped/README.md), [`../fixtures/publish-transaction-shaped/README.md`](../fixtures/publish-transaction-shaped/README.md), [`../fixtures/web-surface-shaped/README.md`](../fixtures/web-surface-shaped/README.md), [`../fixtures/publication-artifact-shaped/README.md`](../fixtures/publication-artifact-shaped/README.md) | verify | stable |\n| What license and contribution terms apply? | [`../LICENSE`](../LICENSE) + [`../LICENSE-POLICY.md`](../LICENSE-POLICY.md) | use | stable |\n| What trademark, official-service, and provider-compliance boundaries apply? | [`../TRADEMARK.md`](../TRADEMARK.md) + [`../ACCEPTABLE_USE.md`](../ACCEPTABLE_USE.md) + [`../PROVIDER_COMPLIANCE.md`](../PROVIDER_COMPLIANCE.md) | use | stable |\n| How do I report a vulnerability? | [`../SECURITY.md`](../SECURITY.md) | use | stable |\n\n## Also asking about\n\n- **ABV / old workflows / old action repositories** -> [`release-governance.md`](release-governance.md)\n  and [`migration-inventory.md`](migration-inventory.md).\n- **v3 / v3-alpha / v3.0 / v3.0-alpha / exact tags / floating tags** ->\n  [`release-governance.md`](release-governance.md) and\n  [`release-flow.md`](release-flow.md).\n- **Buildchain self-dogfood / released alpha canary / stable compatibility lane** ->\n  [`release-governance.md`](release-governance.md#buildchain-alpha-self-dogfood).\n- **qualified alpha ledger / scheduled stable selection / hold and revoke** ->\n  [`stable-candidate-patrol.md`](stable-candidate-patrol.md).\n- **v3.1 vs v3.2 / when to open a new minor line** ->\n  [`versioning.md`](versioning.md).\n- **dry-run / what would happen if this channel PR merges** -> [`cli.md`](cli.md)\n  and [`release-flow.md`](release-flow.md).\n- **protected dev branches / scheduled ready-PR merge / daily-weekly-monthly patrol** ->\n  [`release-governance.md`](release-governance.md#protected-dev-branches) and\n  [`release-governance.md`](release-governance.md#buildchain-patrol).\n- **pnpm / npm / yarn / package-manager adapters** ->\n  [`lifecycle-protocol.md`](lifecycle-protocol.md).\n- **pip / Conan / CMake / custom commands** -> [`lifecycle-protocol.md`](lifecycle-protocol.md)\n  and [`reusable-build-surface.md`](reusable-build-surface.md).\n- **libnode / native artifacts / self-hosted runner matrix** ->\n  [`reusable-build-surface.md`](reusable-build-surface.md) and\n  [`../fixtures/libnode-shaped/README.md`](../fixtures/libnode-shaped/README.md).\n- **S3 artifact relay / self-hosted runner artifact transfer** ->\n  [`reusable-build-surface.md`](reusable-build-surface.md#artifact-transfer-relay).\n- **local Git checkout cache / self-hosted source transport** ->\n  [`reusable-build-surface.md`](reusable-build-surface.md#locked-source-checkout-cache).\n- **runtime train validation / temporary `buildchain-ref` override** ->\n  [`runtime-train-validation.md`](runtime-train-validation.md) and\n  [`reusable-build-surface.md`](reusable-build-surface.md).\n- **consumer workflow feedback / automatic Buildchain GitHub issues** ->\n  [`consumer-issue-reporting.md`](consumer-issue-reporting.md).\n- **PR-stage RC artifacts / promote-only release candidates** ->\n  [`release-candidate.md`](release-candidate.md) and\n  [`reusable-build-surface.md`](reusable-build-surface.md).\n- **infra contract / observed infrastructure outputs / downstream contract propagation** ->\n  [`infra-contract.md`](infra-contract.md).\n- **standalone binary install / platform archives / GitHub Release bundle** ->\n  [`install.md`](install.md), [`binary-distribution.md`](binary-distribution.md),\n  and [`release-passport.md`](release-passport.md).\n- **Trusted Publishing / npm / publish evidence / recovery** ->\n  [`cli.md`](cli.md) and [`publish-transaction.md`](publish-transaction.md).\n- **Git source digest / module build facts / product build facts / legacy\n  Kungfu build info** -> [`build-facts.md`](build-facts.md) and [`cli.md`](cli.md).\n- **release chains / upstream package or publication artifact as source of truth / site synchronization** ->\n  [`release-propagation.md`](release-propagation.md).\n- **paper repositories / PDFs / publication manifests / immutable archive registries / source bundles** ->\n  [`publication-artifacts.md`](publication-artifacts.md).\n- **README status badges / KFD badge bundles / badge facts JSON** ->\n  [`readme-badges.md`](readme-badges.md) and [`cli.md`](cli.md).\n- **Homebrew taps / distribution indexes / Formula drift checks** ->\n  [`homebrew.md`](homebrew.md) and [`cli.md`](cli.md).\n- **KFD-1 contract worlds / byte-for-byte release gates** ->\n  [`release-passport.md`](release-passport.md#kfd-1-contract-world-release-gate).\n- **KFD-2 public release trust claim audit** ->\n  [`release-passport.md`](release-passport.md#kfd-2-release-trust-passport-audit).\n- **KFD-3 collaboration-interface / agent-facing control surface closure** ->\n  [`release-passport.md`](release-passport.md#kfd-3-collaboration-interface-release-gate).\n- **floating `@v3` / contract lock / compatible drift issue** ->\n  [`reusable-build-surface.md`](reusable-build-surface.md#floating-ref-contract-lock).\n- **GitHub Release passport / binary assets / artifact evidence / agent release checks** ->\n  [`release-passport.md`](release-passport.md),\n  [`binary-distribution.md`](binary-distribution.md), and [`cli.md`](cli.md).\n- **Buildchain logging / timestamps / consumer build phase timing** ->\n  [`toolkit-observability.md`](toolkit-observability.md) for JavaScript API\n  imports, and [`cli.md`](cli.md) for workflow or shell command usage.\n- **buildchain.libkungfu.dev / package-owned site facts** ->\n  [`site-bundle-contract.md`](site-bundle-contract.md).\n- **sites / web previews / staging / production gates** ->\n  [`web-surface-deployments.md`](web-surface-deployments.md).\n- **trademark / fork / official service / provider compliance / release\n  evidence boundary** -> [`../TRADEMARK.md`](../TRADEMARK.md),\n  [`../ACCEPTABLE_USE.md`](../ACCEPTABLE_USE.md), and\n  [`../PROVIDER_COMPLIANCE.md`](../PROVIDER_COMPLIANCE.md).\n\n## How this map is maintained\n\n- A document becomes a row here when it is a stable entrypoint for a user,\n  contributor, or workflow consumer.\n- A row's status must never claim more than the artifact delivers.\n- `why` documents explain intent and design pressure; `verify` and `use`\n  documents should state what is guaranteed, where to verify it, and the current\n  maturity of that guarantee."
+      "markdown": "---\nstatus: active\nperiod: ongoing\ntheme: buildchain-documentation-map\ndoc_type: technical-reference\nsource_level: local-files\nconfidence: high\nsensitivity: public\nevidence_grade: A\nreview_state: unreviewed\nlast_reviewed: 2026-07-31\nai_provenance:\n  model_family: GPT-5\n  product: Codex\n  generated_at: 2026-07-31\n  invisible_context: not asserted\n---\n\n# Documentation Map\n\nStart here. Find the question you have; follow it to the document that answers\nit. This map is meant to be readable by both a person skimming for the right doc\nand an agent grounding a specific claim.\n\nEach row carries a **plane** - *why* (intent / rationale), *verify* (trust the\nrunning artifact), *use* (consume / extend) - and a **status**:\n\n- `stable` - current and holds.\n- `draft` - exists, rough or incomplete.\n- `to write` - planned; the material exists but is not yet a single doc.\n- `retired` - intentionally not part of the active Buildchain v3 surface.\n\n## Start by Role or Intent\n\n| Role or intent | First entry | Then |\n| --- | --- | --- |\n| First-time repository adopter | [Golden Path](getting-started.md) | [Lifecycle Protocol](lifecycle-protocol.md) only when the generated defaults need changes |\n| CLI operator or agent | [Generated CLI Reference](cli-reference.md) | [CLI guide](cli.md) for concepts and worked examples |\n| Node toolkit developer | [Generated Node API Reference](node-api-reference.md) | [Core package guide](../packages/core/README.md) for recipes |\n| Build/release operator | [Reusable Build Surface](reusable-build-surface.md) | [Release Flow](release-flow.md) and [Release Passport](release-passport.md) |\n| Product/trust reviewer | [Product Mechanism](product-mechanism.md) | [Release Passport](release-passport.md) and [KFD Support](kfd-support.md) |\n\nThese entrypoints keep common destinations within three meaningful hops:\nREADME or this map, the role entry, and the normative contract or generated\nreference.\n\n## Capability Coverage\n\nThis package should be usable by an agent from the npm artifact alone. The\nmachine-readable `dist/site/` bundle is the first fact source; the Markdown\nmanuals explain those facts and give operator examples.\n\n`dist/site/capability-registry.json` is the capability navigation entrypoint.\nIt groups the public surface into stable product areas so sites and agents do\nnot have to infer structure from file names. Each page, manual, CLI command,\nworkflow, action, and Node API export also carries a `capabilityGroup`,\n`audience`, and `maturity` field in its own registry.\n\n| Capability group | Primary facts | Primary manuals |\n| --- | --- | --- |\n| Getting Started | `capability-registry.json`, `product-mechanism.json` | [`getting-started.md`](getting-started.md), [`install.md`](install.md), [`product-mechanism.md`](product-mechanism.md), [`cli.md`](cli.md) |\n| Release Passport and Trust | `release-model.json`, `artifact-schemas.json`, `publication-authority-registry.json`, `kfd-claims.json` | [`release-passport.md`](release-passport.md), [`github-artifact-attestation.md`](github-artifact-attestation.md), [`publication-authority.md`](publication-authority.md), [`release-candidate.md`](release-candidate.md), [`publish-transaction.md`](publish-transaction.md), [`binary-distribution.md`](binary-distribution.md) |\n| Reusable Build and Lifecycle | `workflow-registry.json`, `controller-registry.json`, `release-model.json` | [`reusable-build-surface.md`](reusable-build-surface.md), [`controller-evidence.md`](controller-evidence.md), [`shifu-gate-profiles.md`](shifu-gate-profiles.md), [`lifecycle-protocol.md`](lifecycle-protocol.md) |\n| KFD Trust and Surface Closure | `kfd-claims.json`, `public-surface-audit.json`, `cli-registry.json`, `node-api-registry.json` | [`kfd-support.md`](kfd-support.md), [`release-passport.md`](release-passport.md) |\n| Site Bundle, Web Surfaces, and Propagation | `buildchain-site.json`, `site-manifest.json`, `page-registry.json`, `release-model.json` | [`site-bundle-contract.md`](site-bundle-contract.md), [`web-surface-deployments.md`](web-surface-deployments.md), [`release-propagation.md`](release-propagation.md) |\n| Publication Artifacts | `publication-registry.json`, `workflow-registry.json`, `node-api-registry.json`, `manual-registry.json`, `kungfu-buildchain-publication-artifact-registry` | [`publication-artifacts.md`](publication-artifacts.md), [`reusable-build-surface.md`](reusable-build-surface.md) |\n| Distribution Indexes and Badges | `badge-endpoint-registry.json`, `node-api-registry.json`, `manual-registry.json` | [`readme-badges.md`](readme-badges.md), [`homebrew.md`](homebrew.md) |\n| Build Facts, Observability, and Diagnostics | `cli-registry.json`, `node-api-registry.json`, lifecycle artifacts | [`build-facts.md`](build-facts.md), [`toolkit-observability.md`](toolkit-observability.md), [`consumer-issue-reporting.md`](consumer-issue-reporting.md) |\n| Governance, Versioning, and Runtime Drift | `buildchain-contract.json`, `workflow-registry.json`, `release-model.json` | [`github-governance-authority.md`](github-governance-authority.md), [`release-governance.md`](release-governance.md), [`release-flow.md`](release-flow.md), [`versioning.md`](versioning.md), [`runtime-train-validation.md`](runtime-train-validation.md), [`cli.md`](cli.md) |\n| CLI and Node API Reference | `cli-registry.json`, `node-api-registry.json`, `workflow-registry.json`, `manual-registry.json` | [`cli-reference.md`](cli-reference.md), [`node-api-reference.md`](node-api-reference.md), [`cli.md`](cli.md), [`../packages/core/README.md`](../packages/core/README.md) |\n\n| Capability | Machine-readable entry | Manual entry |\n| --- | --- | --- |\n| Capability-grouped KFD navigation | `dist/site/capability-registry.json`, `dist/site/page-registry.json`, `dist/site/manual-registry.json`, `dist/site/cli-registry.json`, `dist/site/node-api-registry.json` | this map, [`site-bundle-contract.md`](site-bundle-contract.md), [`kfd-support.md`](kfd-support.md) |\n| KFD-1 / KFD-2 / KFD-3 release-passport gates | `dist/site/kfd-claims.json`, `dist/site/buildchain-contract.json`, `dist/site/artifact-schemas.json` | [`release-passport.md`](release-passport.md) |\n| Product invariant Passport release gate | `buildchain.release.json#invariantPassports`, `dist/site/buildchain-contract.json` | [`release-passport.md`](release-passport.md) |\n| GitHub keyless Linux artifact attestation | `buildchain.release.json#githubArtifactAttestations`, `dist/site/workflow-registry.json`, `dist/site/artifact-schemas.json` | [`github-artifact-attestation.md`](github-artifact-attestation.md) |\n| Declarative cross-platform artifact signing | `kungfu-buildchain-artifact-signing-request/v1`, `kungfu-buildchain-artifact-signing-result/v1` | [`reusable-build-surface.md`](reusable-build-surface.md#artifact-signing-authority) |\n| KFD-3 public surface reverse audit | `dist/site/public-surface-audit.json`, `dist/site/cli-registry.json`, `dist/site/workflow-registry.json`, `dist/site/page-registry.json` | [`cli.md`](cli.md), [`site-bundle-contract.md`](site-bundle-contract.md) |\n| KFD-1 / KFD-2 / KFD-3 first-class CLI and Node API | `.buildchain/kfd/kfd-3/surfaces.json`, `dist/site/kfd-claims.json`, `buildchain.release.json`, KFD schemas from `@kungfu-tech/kfd` | [`kfd-support.md`](kfd-support.md), [`cli.md`](cli.md#commands) |\n| Declarative KFD Agent Hub adapter conformance and Passport evidence | `.buildchain/kfd/agent-hub.json`, `.buildchain/artifacts/kfd-agent-hub/evidence.json`, `buildchain.release.json#kfdAgentHub` | [`kfd-agent-hub.md`](kfd-agent-hub.md) |\n| Floating `@v3` drift detection and compatibility issues | `dist/site/buildchain-contract.json` | [`reusable-build-surface.md`](reusable-build-surface.md#floating-ref-contract-lock) |\n| npm publish transactions, evidence, dist-tags, and recovery | `dist/site/release-model.json`, `dist/site/artifact-schemas.json` | [`publish-transaction.md`](publish-transaction.md) |\n| Git/source/version/module/product build facts | `dist/site/node-api-registry.json`, `dist/site/cli-registry.json`, `kungfu-buildchain-module-build-facts`, `kungfu-buildchain-product-build-facts` | [`build-facts.md`](build-facts.md) |\n| GitHub Release passport/evidence publication | `dist/site/release-model.json`, `dist/site/artifact-schemas.json` | [`release-governance.md`](release-governance.md), [`release-candidate.md`](release-candidate.md) |\n| GitHub ownership, effective protection, plan capability, and managed-zone governance receipts | `dist/site/node-api-registry.json`, `dist/site/cli-registry.json`, `kungfu-buildchain-github-governance-receipt` | [`github-governance-authority.md`](github-governance-authority.md) |\n| release propagation and the unified Paper/KFD/Buildchain/Core Site agent entry | `dist/site/release-model.json`, `dist/site/cli-registry.json`, `dist/site/node-api-registry.json` | [`release-propagation.md`](release-propagation.md) |\n| publication artifact manifests, immutable archive registries, source bundles, and paper repository workflows | `dist/site/publication-registry.json`, `dist/site/workflow-registry.json`, `dist/site/node-api-registry.json`, `kungfu-buildchain-publication-artifact-manifest`, `kungfu-buildchain-publication-artifact-registry` | [`publication-artifacts.md`](publication-artifacts.md) |\n| Generated badge bundles, README badge blocks, and badge facts | `dist/site/node-api-registry.json`, `dist/site/manual-registry.json`, `kungfu-buildchain-badge-bundle-facts`, `kungfu-buildchain-readme-badge-facts` | [`readme-badges.md`](readme-badges.md) |\n| Homebrew tap distribution indexes | `dist/site/node-api-registry.json`, `dist/site/buildchain-contract.json` | [`homebrew.md`](homebrew.md) |\n| Buildchain CLI manual | `dist/site/cli-registry.json`, `dist/site/manual-registry.json` | [`cli.md`](cli.md) |\n| Node API / package exports | `dist/site/node-api-registry.json`, `dist/site/release-provenance.json` | [`cli.md`](cli.md#node-api-and-package-exports) |\n\n`dist/site/kfd-claims.json` is generated from\n`packages/core/buildchain-kfd-claims.js`. Treat that module and JSON file as the\nsource claim registry; this map and the manuals explain those claims but do not\nreplace them.\n\n## Map\n\n| Your question | Document | Plane | Status |\n| --- | --- | --- | --- |\n| What is Buildchain, in one idea? | [`../README.md`](../README.md) | - | stable |\n| How do I complete a first clean adoption in 15–30 minutes? | [`getting-started.md`](getting-started.md) | use | stable |\n| Why is Buildchain a Release Passport mechanism rather than a generic workflow collection? | [`product-mechanism.md`](product-mechanism.md) | why | stable |\n| How do agents and contributors enter this repo? | [`../AGENTS.md`](../AGENTS.md) + [`../CONTRIBUTING.md`](../CONTRIBUTING.md) | use | stable |\n| How do I install a standalone binary or npm package? | [`install.md`](install.md) | use | stable |\n| How do I run or look up the `buildchain` CLI? | [`cli-reference.md`](cli-reference.md) + [`cli.md`](cli.md) | use | stable |\n| How do I import Buildchain toolkit APIs from JavaScript build code? | [`node-api-reference.md`](node-api-reference.md) + [`../packages/core/README.md`](../packages/core/README.md) | use | stable |\n| How do I initialize a new repository? | [`getting-started.md`](getting-started.md) + [`lifecycle-protocol.md`](lifecycle-protocol.md) | use | stable |\n| Why does Buildchain use branch-driven release governance? | [`release-governance.md`](release-governance.md) | why | stable |\n| How do protected dev branches and scheduled ready-PR merging work? | [`release-governance.md`](release-governance.md#protected-dev-branches) | use | stable |\n| How do slow required checks land reliably on a busy dev channel? | [`release-governance.md`](release-governance.md#protected-dev-branches) + [`cli.md`](cli.md#commands) | use | preview |\n| How do I coalesce rapid Dev changes, preserve release runner priority, and retry only transient failed jobs? | [`dev-qualification-patrol.md`](dev-qualification-patrol.md) | use/verify | preview |\n| How do I run daily, weekly, or monthly repository patrols? | [`release-governance.md`](release-governance.md#buildchain-patrol) | use | stable |\n| How does Buildchain decide patch, minor, and major release lines? | [`versioning.md`](versioning.md) | why | stable |\n| What exact branch/tag state machine runs on alpha, release, and major gate? | [`release-flow.md`](release-flow.md) | verify | stable |\n| What did Buildchain migrate or retire from old action repositories? | [`migration-inventory.md`](migration-inventory.md) | verify | stable |\n| What is the active action and workflow source of truth? | [`ownership.md`](ownership.md) | verify | stable |\n| How do I declare version files and custom lifecycle commands? | [`lifecycle-protocol.md`](lifecycle-protocol.md) | use | stable |\n| How does publish evidence, recovery, and finalization work? | [`publish-transaction.md`](publish-transaction.md) | verify | stable |\n| How do I collect and verify module/product build facts from Git source, version files, and outputs? | [`build-facts.md`](build-facts.md) + [`cli.md`](cli.md) | use/verify | stable |\n| How do I publish or verify release passport artifacts? | [`release-passport.md`](release-passport.md) | use | stable |\n| How do I keylessly attest Linux release artifacts with GitHub and bind them to a Release Passport? | [`github-artifact-attestation.md`](github-artifact-attestation.md) | verify/use | preview |\n| How do I request detached, Developer ID, or Authenticode signing without consumer credentials? | [`reusable-build-surface.md`](reusable-build-surface.md#artifact-signing-authority) | verify/use | preview |\n| How do I seal exact artifact, identity, lifecycle, and KFD assessment roots for KFX admission? | [`artifact-verification-envelope.md`](artifact-verification-envelope.md) | verify/use | preview |\n| How is product publication authority sealed to an exact workflow, runner, control plane, nonce, and artifact? | [`publication-authority.md`](publication-authority.md) | verify | preview |\n| How are GitHub ownership, independent review, effective protection, and plan capability audited fail-closed? | [`github-governance-authority.md`](github-governance-authority.md) | verify | preview |\n| How do I gate release artifacts with KFD-1 contract-world witnesses? | [`release-passport.md`](release-passport.md#kfd-1-contract-world-release-gate) | verify/use | stable |\n| How do I declare, render, and audit product KFD-2 release trust claims? | [`kfd-support.md`](kfd-support.md#kfd-2) + [`release-passport.md`](release-passport.md#kfd-2-release-trust-passport-audit) + [`cli.md`](cli.md) | verify/use | stable |\n| How do I gate KFD-3 collaboration-interface releases? | [`release-passport.md`](release-passport.md#kfd-3-collaboration-interface-release-gate) + [`cli.md`](cli.md) | verify/use | stable |\n| How do I detect, register, audit, witness, or query KFD-3 product surfaces? | [`kfd-support.md`](kfd-support.md) + [`cli.md`](cli.md) | verify/use | stable |\n| How do I adopt the KFD Agent Hub profile with one declaration and one adapter? | [`kfd-agent-hub.md`](kfd-agent-hub.md) | verify/use | preview |\n| How do I keep `@v3` floating refs while detecting Buildchain contract drift? | [`reusable-build-surface.md`](reusable-build-surface.md#floating-ref-contract-lock) | verify/use | stable |\n| How do reusable workflows bind controller intent, source/runtime identity, outcomes, and receipt evidence? | [`controller-evidence.md`](controller-evidence.md) | verify/use | draft |\n| How does an Agent propagate a finalized upstream release through downstream PR, deployment, production readback, and Work Control completion? | [`release-propagation.md`](release-propagation.md) | use/verify | preview |\n| How do paper or report repositories publish PDFs, metadata, source bundles, site-consumable manifests, npm packages, and GitHub Releases? | [`publication-artifacts.md`](publication-artifacts.md) | use | stable |\n| How do I generate KFD / Release Passport badge bundles without hand-maintaining Markdown? | [`readme-badges.md`](readme-badges.md) + [`cli.md`](cli.md) | use | stable |\n| How do I generate and verify a Homebrew tap from release passport evidence? | [`homebrew.md`](homebrew.md) + [`cli.md`](cli.md) | use/verify | stable |\n| How do I prove a PR-stage reusable build is the artifact source promoted later? | [`release-candidate.md`](release-candidate.md) + [`reusable-build-surface.md`](reusable-build-surface.md) | verify | stable |\n| Why are binary release assets archived by platform, and where is the single bundle? | [`binary-distribution.md`](binary-distribution.md) | verify | stable |\n| How do I add timestamped logs inside build scripts? | [`toolkit-observability.md`](toolkit-observability.md) | use | stable |\n| What package-owned facts should buildchain.libkungfu.dev render? | [`site-bundle-contract.md`](site-bundle-contract.md) | use | stable |\n| How do I call the reusable build workflow? | [`reusable-build-surface.md`](reusable-build-surface.md) | use | stable |\n| How does Buildchain schedule and aggregate a project-owned Shifu Gate profile? | [`shifu-gate-profiles.md`](shifu-gate-profiles.md) | use/verify | draft |\n| How do exact build artifacts become qualified, transcript-traceable demo media? | [`auditable-demo.md`](auditable-demo.md) | use/verify | draft |\n| How do I use one build job that follows alpha during development and stable for releases? | [`reusable-build-surface.md`](reusable-build-surface.md#automatic-channel-router) | use | preview |\n| How do self-hosted runners relay large artifacts through S3 before GitHub artifacts? | [`reusable-build-surface.md`](reusable-build-surface.md#artifact-transfer-relay) | use | stable |\n| How do self-hosted runners reuse local Git checkout caches without weakening source locks? | [`reusable-build-surface.md`](reusable-build-surface.md#locked-source-checkout-cache) | use | stable |\n| How do ephemeral GitHub-hosted runners share exact dependency or compiler caches without fixed-runner affinity? | [`cli.md`](cli.md#commands) | use/verify | preview |\n| How do I validate an unreleased Buildchain runtime train while keeping `@v3`? | [`runtime-train-validation.md`](runtime-train-validation.md) | use | stable |\n| How do I automatically qualify alpha candidates and publish the newest non-revoked qualified candidate at a fixed window? | [`stable-candidate-patrol.md`](stable-candidate-patrol.md) | use | preview |\n| How do I deploy a site/app preview, staging, or production surface? | [`web-surface-deployments.md`](web-surface-deployments.md) | use | stable |\n| How do I publish observed infrastructure contracts for downstream consumers? | [`infra-contract.md`](infra-contract.md) | use | preview |\n| How do I use the active actions directly? | [`../actions/validate-config/README.md`](../actions/validate-config/README.md), [`../actions/run-lifecycle/README.md`](../actions/run-lifecycle/README.md), [`../actions/promote-buildchain-ref/README.md`](../actions/promote-buildchain-ref/README.md), [`../actions/report-buildchain-issue/README.md`](../actions/report-buildchain-issue/README.md), [`../actions/github-artifact-attestation/README.md`](../actions/github-artifact-attestation/README.md), [`../actions/macos-credential-island/README.md`](../actions/macos-credential-island/README.md); `dist/site/workflow-registry.json#actions` is authoritative for the six-entry inventory. | use | stable |\n| How can a consumer workflow report a Buildchain-owned failure back to Buildchain? | [`consumer-issue-reporting.md`](consumer-issue-reporting.md) + [`../actions/report-buildchain-issue/README.md`](../actions/report-buildchain-issue/README.md) | use | stable |\n| What do the fixture repositories demonstrate? | [`../fixtures/libnode-shaped/README.md`](../fixtures/libnode-shaped/README.md), [`../fixtures/publish-transaction-shaped/README.md`](../fixtures/publish-transaction-shaped/README.md), [`../fixtures/web-surface-shaped/README.md`](../fixtures/web-surface-shaped/README.md), [`../fixtures/publication-artifact-shaped/README.md`](../fixtures/publication-artifact-shaped/README.md) | verify | stable |\n| What license and contribution terms apply? | [`../LICENSE`](../LICENSE) + [`../LICENSE-POLICY.md`](../LICENSE-POLICY.md) | use | stable |\n| What trademark, official-service, and provider-compliance boundaries apply? | [`../TRADEMARK.md`](../TRADEMARK.md) + [`../ACCEPTABLE_USE.md`](../ACCEPTABLE_USE.md) + [`../PROVIDER_COMPLIANCE.md`](../PROVIDER_COMPLIANCE.md) | use | stable |\n| How do I report a vulnerability? | [`../SECURITY.md`](../SECURITY.md) | use | stable |\n\n## Also asking about\n\n- **ABV / old workflows / old action repositories** -> [`release-governance.md`](release-governance.md)\n  and [`migration-inventory.md`](migration-inventory.md).\n- **v3 / v3-alpha / v3.0 / v3.0-alpha / exact tags / floating tags** ->\n  [`release-governance.md`](release-governance.md) and\n  [`release-flow.md`](release-flow.md).\n- **Buildchain self-dogfood / released alpha canary / stable compatibility lane** ->\n  [`release-governance.md`](release-governance.md#buildchain-alpha-self-dogfood).\n- **qualified alpha ledger / scheduled stable selection / hold and revoke** ->\n  [`stable-candidate-patrol.md`](stable-candidate-patrol.md).\n- **v3.1 vs v3.2 / when to open a new minor line** ->\n  [`versioning.md`](versioning.md).\n- **dry-run / what would happen if this channel PR merges** -> [`cli.md`](cli.md)\n  and [`release-flow.md`](release-flow.md).\n- **protected dev branches / scheduled ready-PR merge / daily-weekly-monthly patrol** ->\n  [`release-governance.md`](release-governance.md#protected-dev-branches) and\n  [`release-governance.md`](release-governance.md#buildchain-patrol).\n- **Dev qualification coalescing / release-priority runners / failed-job retry** ->\n  [`dev-qualification-patrol.md`](dev-qualification-patrol.md).\n- **pnpm / npm / yarn / package-manager adapters** ->\n  [`lifecycle-protocol.md`](lifecycle-protocol.md).\n- **pip / Conan / CMake / custom commands** -> [`lifecycle-protocol.md`](lifecycle-protocol.md)\n  and [`reusable-build-surface.md`](reusable-build-surface.md).\n- **libnode / native artifacts / self-hosted runner matrix** ->\n  [`reusable-build-surface.md`](reusable-build-surface.md) and\n  [`../fixtures/libnode-shaped/README.md`](../fixtures/libnode-shaped/README.md).\n- **S3 artifact relay / self-hosted runner artifact transfer** ->\n  [`reusable-build-surface.md`](reusable-build-surface.md#artifact-transfer-relay).\n- **local Git checkout cache / self-hosted source transport** ->\n  [`reusable-build-surface.md`](reusable-build-surface.md#locked-source-checkout-cache).\n- **runtime train validation / temporary `buildchain-ref` override** ->\n  [`runtime-train-validation.md`](runtime-train-validation.md) and\n  [`reusable-build-surface.md`](reusable-build-surface.md).\n- **consumer workflow feedback / automatic Buildchain GitHub issues** ->\n  [`consumer-issue-reporting.md`](consumer-issue-reporting.md).\n- **PR-stage RC artifacts / promote-only release candidates** ->\n  [`release-candidate.md`](release-candidate.md) and\n  [`reusable-build-surface.md`](reusable-build-surface.md).\n- **infra contract / observed infrastructure outputs / downstream contract propagation** ->\n  [`infra-contract.md`](infra-contract.md).\n- **standalone binary install / platform archives / GitHub Release bundle** ->\n  [`install.md`](install.md), [`binary-distribution.md`](binary-distribution.md),\n  and [`release-passport.md`](release-passport.md).\n- **Trusted Publishing / npm / publish evidence / recovery** ->\n  [`cli.md`](cli.md) and [`publish-transaction.md`](publish-transaction.md).\n- **Git source digest / module build facts / product build facts / legacy\n  Kungfu build info** -> [`build-facts.md`](build-facts.md) and [`cli.md`](cli.md).\n- **release chains / upstream package or publication artifact as source of truth / site synchronization** ->\n  [`release-propagation.md`](release-propagation.md).\n- **paper repositories / PDFs / publication manifests / immutable archive registries / source bundles** ->\n  [`publication-artifacts.md`](publication-artifacts.md).\n- **README status badges / KFD badge bundles / badge facts JSON** ->\n  [`readme-badges.md`](readme-badges.md) and [`cli.md`](cli.md).\n- **Homebrew taps / distribution indexes / Formula drift checks** ->\n  [`homebrew.md`](homebrew.md) and [`cli.md`](cli.md).\n- **KFD-1 contract worlds / byte-for-byte release gates** ->\n  [`release-passport.md`](release-passport.md#kfd-1-contract-world-release-gate).\n- **KFD-2 public release trust claim audit** ->\n  [`release-passport.md`](release-passport.md#kfd-2-release-trust-passport-audit).\n- **KFD-3 collaboration-interface / agent-facing control surface closure** ->\n  [`release-passport.md`](release-passport.md#kfd-3-collaboration-interface-release-gate).\n- **floating `@v3` / contract lock / compatible drift issue** ->\n  [`reusable-build-surface.md`](reusable-build-surface.md#floating-ref-contract-lock).\n- **GitHub Release passport / binary assets / artifact evidence / agent release checks** ->\n  [`release-passport.md`](release-passport.md),\n  [`binary-distribution.md`](binary-distribution.md), and [`cli.md`](cli.md).\n- **Buildchain logging / timestamps / consumer build phase timing** ->\n  [`toolkit-observability.md`](toolkit-observability.md) for JavaScript API\n  imports, and [`cli.md`](cli.md) for workflow or shell command usage.\n- **buildchain.libkungfu.dev / package-owned site facts** ->\n  [`site-bundle-contract.md`](site-bundle-contract.md).\n- **sites / web previews / staging / production gates** ->\n  [`web-surface-deployments.md`](web-surface-deployments.md).\n- **trademark / fork / official service / provider compliance / release\n  evidence boundary** -> [`../TRADEMARK.md`](../TRADEMARK.md),\n  [`../ACCEPTABLE_USE.md`](../ACCEPTABLE_USE.md), and\n  [`../PROVIDER_COMPLIANCE.md`](../PROVIDER_COMPLIANCE.md).\n\n## How this map is maintained\n\n- A document becomes a row here when it is a stable entrypoint for a user,\n  contributor, or workflow consumer.\n- A row's status must never claim more than the artifact delivers.\n- `why` documents explain intent and design pressure; `verify` and `use`\n  documents should state what is guaranteed, where to verify it, and the current\n  maturity of that guarantee."
     },
     {
       "id": "manual:migration-inventory",
@@ -2405,7 +2446,7 @@
       ],
       "maturity": "stable",
       "sourcePath": "docs/node-api-reference.md",
-      "digest": "sha256:deab508284ed365a830894205a4d293c524281d6da7126094cf8e9eea8efe223",
+      "digest": "sha256:ae49a589091d1ab91d29f2d6ac52cf2551a9d0b1f78350965b408f40fd219e29",
       "headings": [
         {
           "level": 1,
@@ -2643,7 +2684,7 @@
           "anchor": "kungfu-tech-buildchain-buildchain-kfd-claims"
         }
       ],
-      "markdown": "---\nstatus: active\nperiod: ongoing\ntheme: buildchain-generated-reference\ndoc_type: technical-reference\nsource_level: local-files\nconfidence: high\nsensitivity: public\nevidence_grade: A\nreview_state: generated\nlast_reviewed: 2026-08-01\nai_provenance:\n  model_family: GPT-5\n  product: Codex\n  generated_at: 2026-08-01\n  invisible_context: not asserted\n---\n\n# Buildchain Node API Reference\n\n> Generated from `package.json#exports` and the exported ESM symbols in each target. Do not edit this file by hand.\n\nSignatures and source locations are mechanical. JavaScript return types remain conservative where the source declares no static type.\n\n## `@kungfu-tech/buildchain`\n\nTarget: `./packages/core/index.js`. Public symbols: 547.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `abortReleaseActivationTransaction` | function: function abortReleaseActivationTransaction(transaction, reason) | transaction, reason | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { abortReleaseActivationTransaction } from \"@kungfu-tech/buildchain\";` | `packages/core/release-activation-transaction.js:277` |\n| `AGENT_INDEX_CONTRACT` | constant: const AGENT_INDEX_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { AGENT_INDEX_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:31` |\n| `aggregateBuildFacts` | function: function aggregateBuildFacts({ cwd = process.cwd(), productId = \"\", moduleFacts = [], artifacts = [], now = nowIso(), } = {}) | { cwd = process.cwd(), productId = \"\", moduleFacts = [], artifacts = [], now = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | subprocess | `import { aggregateBuildFacts } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:458` |\n| `aggregateControllerReceipts` | function: function aggregateControllerReceipts({ plans = [], receipts = [] } = {}) | { plans = [], receipts = [] } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { aggregateControllerReceipts } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:448` |\n| `ANCHORED_VERSION_MATERIAL_CONTRACT` | constant: const ANCHORED_VERSION_MATERIAL_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ANCHORED_VERSION_MATERIAL_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/anchored-version-material.js:15` |\n| `appendBuildchainLogEvent` | function: function appendBuildchainLogEvent(filePath, event) | filePath, event | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { appendBuildchainLogEvent } from \"@kungfu-tech/buildchain\";` | `packages/core/logging.js:67` |\n| `applySurfaceTimestampPolicy` | function: function applySurfaceTimestampPolicy(manifest, options = {}) | manifest, options = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { applySurfaceTimestampPolicy } from \"@kungfu-tech/buildchain\";` | `packages/core/surface-manifest.js:79` |\n| `ARTIFACT_EVIDENCE_CONTRACT` | constant: const ARTIFACT_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_EVIDENCE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:29` |\n| `ARTIFACT_PASSPORT_LOCATOR_CONTRACT` | constant: const ARTIFACT_PASSPORT_LOCATOR_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_PASSPORT_LOCATOR_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-passport.js:11` |\n| `ARTIFACT_PASSPORT_POINTER_CONTRACT` | constant: const ARTIFACT_PASSPORT_POINTER_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_PASSPORT_POINTER_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-passport.js:10` |\n| `ARTIFACT_SIGNING_AUTHORITY_CONTRACT` | constant: const ARTIFACT_SIGNING_AUTHORITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_SIGNING_AUTHORITY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing.js:7` |\n| `ARTIFACT_SIGNING_RECEIPT_CONTRACT` | constant: const ARTIFACT_SIGNING_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_SIGNING_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing.js:5` |\n| `ARTIFACT_SIGNING_REQUEST_CONTRACT` | constant: const ARTIFACT_SIGNING_REQUEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_SIGNING_REQUEST_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing.js:3` |\n| `ARTIFACT_SIGNING_RESULT_CONTRACT` | constant: const ARTIFACT_SIGNING_RESULT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_SIGNING_RESULT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing-result.js:12` |\n| `ARTIFACT_VERIFICATION_CONTRACT` | constant: const ARTIFACT_VERIFICATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_VERIFICATION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-passport.js:9` |\n| `ARTIFACT_VERIFICATION_ENVELOPE_CHECK_CONTRACT` | constant: const ARTIFACT_VERIFICATION_ENVELOPE_CHECK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_VERIFICATION_ENVELOPE_CHECK_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-verification-envelope.js:5` |\n| `ARTIFACT_VERIFICATION_ENVELOPE_CONTRACT` | constant: const ARTIFACT_VERIFICATION_ENVELOPE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_VERIFICATION_ENVELOPE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-verification-envelope.js:3` |\n| `artifactSigningDigest` | function: function artifactSigningDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { artifactSigningDigest } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing.js:60` |\n| `artifactSigningEvidenceDigest` | function: function artifactSigningEvidenceDigest(evidence = []) | evidence = [] | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { artifactSigningEvidenceDigest } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing-result.js:58` |\n| `artifactVerificationEnvelopeDigest` | function: function artifactVerificationEnvelopeDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { artifactVerificationEnvelopeDigest } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-verification-envelope.js:50` |\n| `assertPackageManager` | function: function assertPackageManager(manager) | manager | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { assertPackageManager } from \"@kungfu-tech/buildchain\";` | `packages/core/package-manager.js:49` |\n| `assertPublicSurfaceReverseAudit` | function: function assertPublicSurfaceReverseAudit(report) | report | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { assertPublicSurfaceReverseAudit } from \"@kungfu-tech/buildchain\";` | `packages/core/public-surface-audit.js:261` |\n| `auditKfd3Surfaces` | function: function auditKfd3Surfaces({ cwd = process.cwd(), registryPath = \"\", kinds = [], artifactPath = \"\", } = {}) | { cwd = process.cwd(), registryPath = \"\", kinds = [], artifactPath = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { auditKfd3Surfaces } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd3-surface-register.js:547` |\n| `BADGE_BUNDLE_DEFAULT_CLAIMS` | constant: const BADGE_BUNDLE_DEFAULT_CLAIMS | none | value | Import does not declare a throw contract. | none-on-import | `import { BADGE_BUNDLE_DEFAULT_CLAIMS } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:17` |\n| `BADGE_BUNDLE_FACTS_CONTRACT` | constant: const BADGE_BUNDLE_FACTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BADGE_BUNDLE_FACTS_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:13` |\n| `BUILD_FACTS_GIT_CONTRACT` | constant: const BUILD_FACTS_GIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_GIT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:9` |\n| `BUILD_FACTS_LEGACY_KUNGFU_BUILDINFO_CONTRACT` | constant: const BUILD_FACTS_LEGACY_KUNGFU_BUILDINFO_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_LEGACY_KUNGFU_BUILDINFO_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:14` |\n| `BUILD_FACTS_MODULE_CONTRACT` | constant: const BUILD_FACTS_MODULE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_MODULE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:11` |\n| `BUILD_FACTS_PRODUCT_CONTRACT` | constant: const BUILD_FACTS_PRODUCT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_PRODUCT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:12` |\n| `BUILD_FACTS_VERIFY_CONTRACT` | constant: const BUILD_FACTS_VERIFY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_VERIFY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:13` |\n| `BUILD_FACTS_VERSION_CONTRACT` | constant: const BUILD_FACTS_VERSION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_VERSION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:10` |\n| `BUILDCHAIN_AGENT_MANUALS` | constant: const BUILDCHAIN_AGENT_MANUALS | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_AGENT_MANUALS } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-agent-manuals.js:1` |\n| `BUILDCHAIN_ANCHORED_PACKAGE_RELEASE_VALIDATION_CONTRACT` | constant: const BUILDCHAIN_ANCHORED_PACKAGE_RELEASE_VALIDATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_ANCHORED_PACKAGE_RELEASE_VALIDATION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:31` |\n| `BUILDCHAIN_CACHE_EVIDENCE_SET_CONTRACT` | constant: const BUILDCHAIN_CACHE_EVIDENCE_SET_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CACHE_EVIDENCE_SET_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/cache-evidence.js:5` |\n| `BUILDCHAIN_CACHE_OPERATION_RECEIPT_CONTRACT` | constant: const BUILDCHAIN_CACHE_OPERATION_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CACHE_OPERATION_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/cache-evidence.js:3` |\n| `BUILDCHAIN_CANDIDATE_TIMELINE_CONTRACT` | constant: const BUILDCHAIN_CANDIDATE_TIMELINE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CANDIDATE_TIMELINE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/candidate-timeline.js:1` |\n| `BUILDCHAIN_CANDIDATE_TIMELINE_EVENT_CONTRACT` | constant: const BUILDCHAIN_CANDIDATE_TIMELINE_EVENT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CANDIDATE_TIMELINE_EVENT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/candidate-timeline.js:3` |\n| `BUILDCHAIN_CONFIG_PATH` | constant: const BUILDCHAIN_CONFIG_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONFIG_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:7` |\n| `BUILDCHAIN_CONSUMER_ISSUE_CONTRACT` | constant: const BUILDCHAIN_CONSUMER_ISSUE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONSUMER_ISSUE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:4` |\n| `BUILDCHAIN_CONTRACT_LOCK` | constant: const BUILDCHAIN_CONTRACT_LOCK | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTRACT_LOCK } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-contract.js:8` |\n| `BUILDCHAIN_CONTRACT_LOCK_PATH` | constant: const BUILDCHAIN_CONTRACT_LOCK_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTRACT_LOCK_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:9` |\n| `BUILDCHAIN_CONTROLLER_AGGREGATE_CONTRACT` | constant: const BUILDCHAIN_CONTROLLER_AGGREGATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTROLLER_AGGREGATE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:6` |\n| `BUILDCHAIN_CONTROLLER_DESCRIPTOR_CONTRACT` | constant: const BUILDCHAIN_CONTROLLER_DESCRIPTOR_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTROLLER_DESCRIPTOR_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:4` |\n| `BUILDCHAIN_CONTROLLER_EVIDENCE_CONTRACT` | constant: const BUILDCHAIN_CONTROLLER_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTROLLER_EVIDENCE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:3` |\n| `BUILDCHAIN_CONTROLLER_REGISTRY_CONTRACT` | constant: const BUILDCHAIN_CONTROLLER_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTROLLER_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:5` |\n| `BUILDCHAIN_DIAGNOSTICS_CONTRACT` | constant: const BUILDCHAIN_DIAGNOSTICS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_DIAGNOSTICS_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:28` |\n| `BUILDCHAIN_DIAGNOSTICS_MANIFEST_CONTRACT` | constant: const BUILDCHAIN_DIAGNOSTICS_MANIFEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_DIAGNOSTICS_MANIFEST_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:33` |\n| `BUILDCHAIN_DIAGNOSTICS_SUMMARY_CONTRACT` | constant: const BUILDCHAIN_DIAGNOSTICS_SUMMARY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_DIAGNOSTICS_SUMMARY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:35` |\n| `BUILDCHAIN_DIR` | constant: const BUILDCHAIN_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_DIR } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:4` |\n| `BUILDCHAIN_GENERATED_DIRS` | constant: const BUILDCHAIN_GENERATED_DIRS | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_GENERATED_DIRS } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:36` |\n| `BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY` | constant: const BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:1363` |\n| `BUILDCHAIN_GITHUB_GOVERNANCE_PROTECTED_PATHS` | constant: const BUILDCHAIN_GITHUB_GOVERNANCE_PROTECTED_PATHS | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_GITHUB_GOVERNANCE_PROTECTED_PATHS } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:1365` |\n| `BUILDCHAIN_JSON_FORMATTING_POLICY` | constant: const BUILDCHAIN_JSON_FORMATTING_POLICY | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_JSON_FORMATTING_POLICY } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:14` |\n| `BUILDCHAIN_KFD_CLAIM_REGISTRY_CONTRACT` | constant: const BUILDCHAIN_KFD_CLAIM_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD_CLAIM_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-kfd-claims.js:14` |\n| `BUILDCHAIN_KFD_COLLABORATION_INTERFACE_CONTRACT` | constant: const BUILDCHAIN_KFD_COLLABORATION_INTERFACE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD_COLLABORATION_INTERFACE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-kfd-claims.js:15` |\n| `BUILDCHAIN_KFD_ROOT` | constant: const BUILDCHAIN_KFD_ROOT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD_ROOT } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:11` |\n| `BUILDCHAIN_KFD1_CONTRACT_WORLD_WITNESS_PATH` | constant: const BUILDCHAIN_KFD1_CONTRACT_WORLD_WITNESS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD1_CONTRACT_WORLD_WITNESS_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:16` |\n| `BUILDCHAIN_KFD1_DIR` | constant: const BUILDCHAIN_KFD1_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD1_DIR } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:12` |\n| `BUILDCHAIN_KFD1_RELEASE_GATE_PATH` | constant: const BUILDCHAIN_KFD1_RELEASE_GATE_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD1_RELEASE_GATE_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:17` |\n| `BUILDCHAIN_KFD1_VERIFY_RESULT_PATH` | constant: const BUILDCHAIN_KFD1_VERIFY_RESULT_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD1_VERIFY_RESULT_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:18` |\n| `BUILDCHAIN_KFD2_CLAIM_ARGS_PATH` | constant: const BUILDCHAIN_KFD2_CLAIM_ARGS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_CLAIM_ARGS_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:21` |\n| `BUILDCHAIN_KFD2_CLAIMS_DIR` | constant: const BUILDCHAIN_KFD2_CLAIMS_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_CLAIMS_DIR } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:22` |\n| `BUILDCHAIN_KFD2_DIR` | constant: const BUILDCHAIN_KFD2_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_DIR } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:13` |\n| `BUILDCHAIN_KFD2_REGISTRY_PATH` | constant: const BUILDCHAIN_KFD2_REGISTRY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_REGISTRY_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:19` |\n| `BUILDCHAIN_KFD2_RELEASE_CLAIMS_PATH` | constant: const BUILDCHAIN_KFD2_RELEASE_CLAIMS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_RELEASE_CLAIMS_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:20` |\n| `BUILDCHAIN_KFD3_ARTIFACT_WITNESS_PATH` | constant: const BUILDCHAIN_KFD3_ARTIFACT_WITNESS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_ARTIFACT_WITNESS_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:26` |\n| `BUILDCHAIN_KFD3_CAPABILITY_QUERY_PATH` | constant: const BUILDCHAIN_KFD3_CAPABILITY_QUERY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_CAPABILITY_QUERY_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:27` |\n| `BUILDCHAIN_KFD3_COLLABORATION_INTERFACE_PATH` | constant: const BUILDCHAIN_KFD3_COLLABORATION_INTERFACE_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_COLLABORATION_INTERFACE_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:24` |\n| `BUILDCHAIN_KFD3_DIR` | constant: const BUILDCHAIN_KFD3_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_DIR } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:14` |\n| `BUILDCHAIN_KFD3_PREBUILD_WITNESS_PATH` | constant: const BUILDCHAIN_KFD3_PREBUILD_WITNESS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_PREBUILD_WITNESS_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:25` |\n| `BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH` | constant: const BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:23` |\n| `BUILDCHAIN_KFD4_DIR` | constant: const BUILDCHAIN_KFD4_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD4_DIR } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:15` |\n| `BUILDCHAIN_LAYOUT_DISCOVERY_CONTRACT` | constant: const BUILDCHAIN_LAYOUT_DISCOVERY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LAYOUT_DISCOVERY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:6` |\n| `BUILDCHAIN_LIFECYCLE_OBSERVABILITY_CONTRACT` | constant: const BUILDCHAIN_LIFECYCLE_OBSERVABILITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LIFECYCLE_OBSERVABILITY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:29` |\n| `BUILDCHAIN_LOCKED_SOURCE_CHECKOUT_CONTRACT` | constant: const BUILDCHAIN_LOCKED_SOURCE_CHECKOUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LOCKED_SOURCE_CHECKOUT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:41` |\n| `BUILDCHAIN_LOG_EVENT_CONTRACT` | constant: const BUILDCHAIN_LOG_EVENT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LOG_EVENT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/logging.js:6` |\n| `BUILDCHAIN_LOG_SUMMARY_CONTRACT` | constant: const BUILDCHAIN_LOG_SUMMARY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LOG_SUMMARY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/logging.js:7` |\n| `BUILDCHAIN_PROCESS_SAMPLE_REPORT_CONTRACT` | constant: const BUILDCHAIN_PROCESS_SAMPLE_REPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_PROCESS_SAMPLE_REPORT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:37` |\n| `BUILDCHAIN_PROCESS_SAMPLE_SUMMARY_CONTRACT` | constant: const BUILDCHAIN_PROCESS_SAMPLE_SUMMARY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_PROCESS_SAMPLE_SUMMARY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:39` |\n| `BUILDCHAIN_PUBLIC_SURFACE_AUDIT_CONTRACT` | constant: const BUILDCHAIN_PUBLIC_SURFACE_AUDIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_PUBLIC_SURFACE_AUDIT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/public-surface-audit.js:12` |\n| `BUILDCHAIN_RELEASE_PASSPORT_PATH` | constant: const BUILDCHAIN_RELEASE_PASSPORT_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_RELEASE_PASSPORT_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:33` |\n| `BUILDCHAIN_RUNTIME_CONTRACT_WORLD` | constant: const BUILDCHAIN_RUNTIME_CONTRACT_WORLD | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_RUNTIME_CONTRACT_WORLD } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-contract.js:7` |\n| `BUILDCHAIN_VERSION_PIN_PATH` | constant: const BUILDCHAIN_VERSION_PIN_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_VERSION_PIN_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:5` |\n| `BUILDCHAIN_WORKFLOW_FRICTION_ISSUE_CONTRACT` | constant: const BUILDCHAIN_WORKFLOW_FRICTION_ISSUE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_WORKFLOW_FRICTION_ISSUE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:5` |\n| `buildchainKfdClaims` | constant: const buildchainKfdClaims | none | value | Import does not declare a throw contract. | none-on-import | `import { buildchainKfdClaims } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd.js:896` |\n| `buildchainPublicationAuthorityDescriptors` | function: function buildchainPublicationAuthorityDescriptors() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { buildchainPublicationAuthorityDescriptors } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-publication-authority.js:53` |\n| `buildConsumerIssueReport` | function: function buildConsumerIssueReport(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { buildConsumerIssueReport } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:104` |\n| `buildFactsDigest` | function: function buildFactsDigest(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write, subprocess | `import { buildFactsDigest } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:45` |\n| `buildWorkflowFrictionIssueReport` | function: function buildWorkflowFrictionIssueReport(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { buildWorkflowFrictionIssueReport } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:199` |\n| `cacheEvidenceDigest` | function: function cacheEvidenceDigest(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { cacheEvidenceDigest } from \"@kungfu-tech/buildchain\";` | `packages/core/cache-evidence.js:48` |\n| `CHANNEL_CANDIDATE_DECISION_SCHEMA` | constant: const CHANNEL_CANDIDATE_DECISION_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { CHANNEL_CANDIDATE_DECISION_SCHEMA } from \"@kungfu-tech/buildchain\";` | `packages/core/channel-candidate.js:5` |\n| `channelCandidateSourceLockRef` | function: function channelCandidateSourceLockRef(targetBranch, sourceSha) | targetBranch, sourceSha | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { channelCandidateSourceLockRef } from \"@kungfu-tech/buildchain\";` | `packages/core/channel-candidate.js:84` |\n| `checkBadgeBundleBlock` | function: function checkBadgeBundleBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkBadgeBundleBlock } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:867` |\n| `checkHomebrewTap` | function: async function checkHomebrewTap({ cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", } = {}) | { cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkHomebrewTap } from \"@kungfu-tech/buildchain\";` | `packages/core/homebrew.js:335` |\n| `checkKfd2ProductClaimOutputs` | function: function checkKfd2ProductClaimOutputs(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkKfd2ProductClaimOutputs } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd2-product-claims.js:415` |\n| `checkReadmeBadgeBlock` | function: function checkReadmeBadgeBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkReadmeBadgeBlock } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:848` |\n| `claimReleasePropagationWork` | function: function claimReleasePropagationWork({ work, expectedWorkRoot, authority, familyState, } = {}) | { work, expectedWorkRoot, authority, familyState, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { claimReleasePropagationWork } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-work-transitions.js:17` |\n| `classifyProcessCommand` | function: function classifyProcessCommand(command = \"\") | command = \"\" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { classifyProcessCommand } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:1085` |\n| `codeownersForPath` | function: function codeownersForPath(source, candidatePath) | source, candidatePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { codeownersForPath } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:417` |\n| `collectBadgeBundleFacts` | function: async function collectBadgeBundleFacts({ cwd = process.cwd(), claims = undefined } = {}) | { cwd = process.cwd(), claims = undefined } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectBadgeBundleFacts } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:790` |\n| `collectBuildchainDiagnostics` | function: function collectBuildchainDiagnostics({ cwd = process.cwd(), artifactPaths = [] } = {}) | { cwd = process.cwd(), artifactPaths = [] } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectBuildchainDiagnostics } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:248` |\n| `collectCacheDiagnostics` | function: function collectCacheDiagnostics({ cwd = process.cwd(), cacheDirs = [], runCommand = defaultDiagnosticCommandRunner } = {}) | { cwd = process.cwd(), cacheDirs = [], runCommand = defaultDiagnosticCommandRunner } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectCacheDiagnostics } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:922` |\n| `collectCompilerCacheDiagnostics` | function: function collectCompilerCacheDiagnostics({ cwd = process.cwd(), runCommand = defaultDiagnosticCommandRunner, env = process.env, } = {}) | { cwd = process.cwd(), runCommand = defaultDiagnosticCommandRunner, env = process.env, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectCompilerCacheDiagnostics } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:573` |\n| `collectGitDiagnostics` | function: function collectGitDiagnostics({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectGitDiagnostics } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:944` |\n| `collectGitHubReleasePassport` | function: function collectGitHubReleasePassport({ cwd = process.cwd(), tag = \"\", repository = process.env.GITHUB_REPOSITORY \\|\\| \"\", sourceSha = process.env.GITHUB_SHA \\|\\| \"\", line = \"\", outputDir = \".buildchain/release-passport\", assetsJson = \"\", assetsDir = \"\", releaseJson = \"\", productName = \"Buildchain\", packageName = \"@kungfu-tech/buildchain\", packageVersion = \"\", packageSetJson = \"\", publishEvidenceJson = \"\", trustedPublishingJson = \"\", transactionJson = \"\", anchorManifestJson = \"\", versionMaterialJson = \"\", impactJson = \"\", buildSummaryJson = \"\", buildFactsJsons = [], platformManifestJsons = [], distTagEvidenceJson = \"\", kfd1WitnessJsons = [], kfd2ClaimJsons = [], kfd3PrebuildWitnessJsons = [], kfd3ArtifactWitnessJsons = [], kfd3ArtifactVerifyCommand = \"\", kfdSupportMatrixJson = \"\", kfdProductGateJsons = [], invariantPassportJsons = [], invariantPassportCommand = \"\", releaseEvidenceJsons = [], kfdAgentHubEvidenceJson = \"\", controllerReceiptReferences = [], githubArtifactAttestationPolicyJsons = [], basePassportJson = \"\", requireBaseKfd = false, releaseJsonExtra = \"\", publishJson = \"\", workflow = {}, checkedAt = \"\", } = {}) | { cwd = process.cwd(), tag = \"\", repository = process.env.GITHUB_REPOSITORY \\|\\| \"\", sourceSha = process.env.GITHUB_SHA \\|\\| \"\", line = \"\", outputDir = \".buildchain/release-passport\", assetsJson = \"\", assetsDir = \"\", releaseJson = \"\", productName = \"Buildchain\", packageName = \"@kungfu-tech/buildchain\", packageVersion = \"\", packageSetJson = \"\", publishEvidenceJson = \"\", trustedPublishingJson = \"\", transactionJson = \"\", anchorManifestJson = \"\", versionMaterialJson = \"\", impactJson = \"\", buildSummaryJson = \"\", buildFactsJsons = [], platformManifestJsons = [], distTagEvidenceJson = \"\", kfd1WitnessJsons = [], kfd2ClaimJsons = [], kfd3PrebuildWitnessJsons = [], kfd3ArtifactWitnessJsons = [], kfd3ArtifactVerifyCommand = \"\", kfdSupportMatrixJson = \"\", kfdProductGateJsons = [], invariantPassportJsons = [], invariantPassportCommand = \"\", releaseEvidenceJsons = [], kfdAgentHubEvidenceJson = \"\", controllerReceiptReferences = [], githubArtifactAttestationPolicyJsons = [], basePassportJson = \"\", requireBaseKfd = false, releaseJsonExtra = \"\", publishJson = \"\", workflow = {}, checkedAt = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { collectGitHubReleasePassport } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:1488` |\n| `collectGitSourceFacts` | function: function collectGitSourceFacts({ cwd = process.cwd(), root = \".\" } = {}) | { cwd = process.cwd(), root = \".\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectGitSourceFacts } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:146` |\n| `collectHomebrewTapFacts` | function: async function collectHomebrewTapFacts({ cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", } = {}) | { cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectHomebrewTapFacts } from \"@kungfu-tech/buildchain\";` | `packages/core/homebrew.js:223` |\n| `collectKfdStatus` | function: function collectKfdStatus({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectKfdStatus } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd.js:902` |\n| `collectModuleBuildFacts` | function: function collectModuleBuildFacts({ cwd = process.cwd(), moduleId = \"\", moduleRoot = \"\", scope = \"\", versionSource = undefined, versionSourceId = \"\", outputs = [], lifecycle = \"\", platform = currentPlatform(), dependencies = [], now = nowIso(), } = {}) | { cwd = process.cwd(), moduleId = \"\", moduleRoot = \"\", scope = \"\", versionSource = undefined, versionSourceId = \"\", outputs = [], lifecycle = \"\", platform = currentPlatform(), dependencies = [], now = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectModuleBuildFacts } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:302` |\n| `collectNativeDiagnostics` | function: function collectNativeDiagnostics({ cwd = process.cwd(), profile = undefined, runCommand = defaultDiagnosticCommandRunner, } = {}) | { cwd = process.cwd(), profile = undefined, runCommand = defaultDiagnosticCommandRunner, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectNativeDiagnostics } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:295` |\n| `collectPaperFleetAudit` | function: function collectPaperFleetAudit({ root = process.cwd(), repositories = [], buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainSha = \"\", governance = {}, } = {}) | { root = process.cwd(), repositories = [], buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainSha = \"\", governance = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectPaperFleetAudit } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-fleet.js:158` |\n| `collectPaperPreflight` | function: function collectPaperPreflight({ cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainRef = \"v3\", buildchainSha = \"\", registry = NPM_REGISTRY, offline = false, agentEntryMode = \"contract\", } = {}) | { cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainRef = \"v3\", buildchainSha = \"\", registry = NPM_REGISTRY, offline = false, agentEntryMode = \"contract\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectPaperPreflight } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:2413` |\n| `collectPaperStatus` | function: function collectPaperStatus({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectPaperStatus } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:1471` |\n| `collectProcessTreeSnapshot` | function: function collectProcessTreeSnapshot({ rootPid = process.pid, cwd = process.cwd(), platform = process.platform, runCommand = defaultDiagnosticCommandRunner, } = {}) | { rootPid = process.pid, cwd = process.cwd(), platform = process.platform, runCommand = defaultDiagnosticCommandRunner, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectProcessTreeSnapshot } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:1029` |\n| `collectPublicationArtifact` | function: function collectPublicationArtifact({ cwd = process.cwd(), sourceSha = \"\", sourceBundle = true, sourceBundlePath = \"\", generatedAt = \"\", manifestPath = \"\", passportPath = \"\", } = {}) | { cwd = process.cwd(), sourceSha = \"\", sourceBundle = true, sourceBundlePath = \"\", generatedAt = \"\", manifestPath = \"\", passportPath = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { collectPublicationArtifact } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-artifact.js:271` |\n| `collectPublicationPackageFacts` | function: function collectPublicationPackageFacts({ cwd = process.cwd(), packageName = \"\", outputDir = \".buildchain/publication/npm-package\", } = {}) | { cwd = process.cwd(), packageName = \"\", outputDir = \".buildchain/publication/npm-package\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { collectPublicationPackageFacts } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-package.js:74` |\n| `collectPublicSurfaceReverseAudit` | function: function collectPublicSurfaceReverseAudit({ root = process.cwd(), cliRegistry: suppliedCliRegistry = undefined, workflowRegistry: suppliedWorkflowRegistry = undefined, pageRegistry: suppliedPageRegistry = undefined, } = {}) | { root = process.cwd(), cliRegistry: suppliedCliRegistry = undefined, workflowRegistry: suppliedWorkflowRegistry = undefined, pageRegistry: suppliedPageRegistry = undefined, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectPublicSurfaceReverseAudit } from \"@kungfu-tech/buildchain\";` | `packages/core/public-surface-audit.js:161` |\n| `collectReadmeBadgeFacts` | function: async function collectReadmeBadgeFacts({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectReadmeBadgeFacts } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:700` |\n| `collectRunnerDiagnostics` | function: function collectRunnerDiagnostics() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectRunnerDiagnostics } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:468` |\n| `collectToolDiagnostics` | function: function collectToolDiagnostics({ cwd = process.cwd(), tools = [\"node\", \"pnpm\", \"npm\", \"git\", \"cmake\", \"ninja\", \"ccache\", \"sccache\"] } = {}) | { cwd = process.cwd(), tools = [\"node\", \"pnpm\", \"npm\", \"git\", \"cmake\", \"ninja\", \"ccache\", \"sccache\"] } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectToolDiagnostics } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:495` |\n| `collectVersionSourceFact` | function: function collectVersionSourceFact({ cwd = process.cwd(), source = undefined, sourceId = \"\", now = nowIso() } = {}) | { cwd = process.cwd(), source = undefined, sourceId = \"\", now = nowIso() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { collectVersionSourceFact } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:173` |\n| `commandForKungfuUpgrade` | function: function commandForKungfuUpgrade(manager, scope = \"@kungfu-trader\") | manager, scope = \"@kungfu-trader\" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { commandForKungfuUpgrade } from \"@kungfu-tech/buildchain\";` | `packages/core/package-manager.js:121` |\n| `commandForRunScript` | function: function commandForRunScript(manager, script) | manager, script | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { commandForRunScript } from \"@kungfu-tech/buildchain\";` | `packages/core/package-manager.js:89` |\n| `commandForVersion` | function: function commandForVersion(manager, keyword, options = {}) | manager, keyword, options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { commandForVersion } from \"@kungfu-tech/buildchain\";` | `packages/core/package-manager.js:100` |\n| `compileEffectiveGithubGovernancePolicy` | function: function compileEffectiveGithubGovernancePolicy({ branch, defaultBranch, protectedBranch = false, protection, rulesets = [], } = {}) | { branch, defaultBranch, protectedBranch = false, protection, rulesets = [], } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { compileEffectiveGithubGovernancePolicy } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:311` |\n| `completeReleasePropagationWork` | function: function completeReleasePropagationWork({ work, expectedWorkRoot, receipt, completionDecision, } = {}) | { work, expectedWorkRoot, receipt, completionDecision, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { completeReleasePropagationWork } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-work-transitions.js:110` |\n| `computeConsumerIssueFingerprint` | function: function computeConsumerIssueFingerprint(fields = {}) | fields = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { computeConsumerIssueFingerprint } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:64` |\n| `CONSUMER_PUBLICATION_DECISION_CONTRACT` | constant: const CONSUMER_PUBLICATION_DECISION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { CONSUMER_PUBLICATION_DECISION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:20` |\n| `consumerIssueMarker` | function: function consumerIssueMarker(fingerprint) | fingerprint | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { consumerIssueMarker } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:76` |\n| `contractSummary` | function: function contractSummary(contractWorld, runtimeRef = \"\", runtimeSha = \"\") | contractWorld, runtimeRef = \"\", runtimeSha = \"\" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { contractSummary } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-contract.js:945` |\n| `controllerEvidenceDigest` | function: function controllerEvidenceDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { controllerEvidenceDigest } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:150` |\n| `createAnchoredVersionMaterialEvidence` | function: function createAnchoredVersionMaterialEvidence({ cwd = process.cwd(), targetChannel = \"\", targetRef = \"\", alphaRef = \"\", releaseRef = \"HEAD\", runLifecycle = true, } = {}) | { cwd = process.cwd(), targetChannel = \"\", targetRef = \"\", alphaRef = \"\", releaseRef = \"HEAD\", runLifecycle = true, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createAnchoredVersionMaterialEvidence } from \"@kungfu-tech/buildchain\";` | `packages/core/anchored-version-material.js:118` |\n| `createArtifactEvidence` | function: function createArtifactEvidence({ assets = [], repository = \"\", tag = \"\", sourceSha = \"\", workflow = {} } = {}) | { assets = [], repository = \"\", tag = \"\", sourceSha = \"\", workflow = {} } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createArtifactEvidence } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:1158` |\n| `createArtifactSigningReceipt` | function: function createArtifactSigningReceipt({ request, status = \"passed\", authority = {}, result = {}, signatures = [], reason = \"\", } = {}) | { request, status = \"passed\", authority = {}, result = {}, signatures = [], reason = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createArtifactSigningReceipt } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing.js:313` |\n| `createArtifactSigningRequest` | function: function createArtifactSigningRequest({ source = {}, runtime = {}, artifact = {}, signature = {}, delivery = {}, } = {}) | { source = {}, runtime = {}, artifact = {}, signature = {}, delivery = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createArtifactSigningRequest } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing.js:167` |\n| `createArtifactSigningResult` | function: function createArtifactSigningResult({ request, receipt, receiptPath = \"receipt.json\", payload = {}, evidence = [], verification = {}, } = {}) | { request, receipt, receiptPath = \"receipt.json\", payload = {}, evidence = [], verification = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createArtifactSigningResult } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing-result.js:68` |\n| `createBuildchainContractLock` | function: function createBuildchainContractLock({ buildchainRef = \"v3\", resolvedSha = \"\", contractWorld, compatibilityPolicy = DEFAULT_POLICY, acceptedAt = new Date().toISOString(), } = {}) | { buildchainRef = \"v3\", resolvedSha = \"\", contractWorld, compatibilityPolicy = DEFAULT_POLICY, acceptedAt = new Date().toISOString(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createBuildchainContractLock } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-contract.js:787` |\n| `createBuildchainContractWorld` | function: function createBuildchainContractWorld({ root = process.cwd(), packageJson = undefined, controllerRegistry = undefined, } = {}) | { root = process.cwd(), packageJson = undefined, controllerRegistry = undefined, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainContractWorld } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-contract.js:110` |\n| `createBuildchainGithubGovernanceAuthority` | function: function createBuildchainGithubGovernanceAuthority() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainGithubGovernanceAuthority } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:450` |\n| `createBuildchainKfd1Witness` | function: function createBuildchainKfd1Witness({ root = process.cwd(), sourceSha = \"\" } = {}) | { root = process.cwd(), sourceSha = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfd1Witness } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-kfd-claims.js:530` |\n| `createBuildchainKfd2Claims` | function: function createBuildchainKfd2Claims({ root = process.cwd(), witnessFiles = {} } = {}) | { root = process.cwd(), witnessFiles = {} } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfd2Claims } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-kfd-claims.js:687` |\n| `createBuildchainKfd3ArtifactWitness` | function: function createBuildchainKfd3ArtifactWitness({ root = process.cwd(), sourceSha = \"\" } = {}) | { root = process.cwd(), sourceSha = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfd3ArtifactWitness } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-kfd-claims.js:647` |\n| `createBuildchainKfd3PrebuildWitness` | function: function createBuildchainKfd3PrebuildWitness({ root = process.cwd(), sourceSha = \"\" } = {}) | { root = process.cwd(), sourceSha = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfd3PrebuildWitness } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-kfd-claims.js:583` |\n| `createBuildchainKfdClaimRegistry` | function: function createBuildchainKfdClaimRegistry({ root = process.cwd(), sourceSha = \"\" } = {}) | { root = process.cwd(), sourceSha = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfdClaimRegistry } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-kfd-claims.js:510` |\n| `createBuildchainKfdSurfaceRegistry` | function: function createBuildchainKfdSurfaceRegistry({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfdSurfaceRegistry } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-kfd-claims.js:411` |\n| `createBuildchainLayoutDiscovery` | function: function createBuildchainLayoutDiscovery({ cwd = process.cwd(), buildchainVersion = \"\", } = {}) | { cwd = process.cwd(), buildchainVersion = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainLayoutDiscovery } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:99` |\n| `createBuildchainLogger` | function: function createBuildchainLogger(options = {}) | options = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { createBuildchainLogger } from \"@kungfu-tech/buildchain\";` | `packages/core/logging.js:300` |\n| `createBuildchainPublicationAuthorityRegistry` | function: function createBuildchainPublicationAuthorityRegistry({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainPublicationAuthorityRegistry } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-publication-authority.js:78` |\n| `createBuildchainPublicClaimDefinitions` | function: function createBuildchainPublicClaimDefinitions() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainPublicClaimDefinitions } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-kfd-claims.js:226` |\n| `createCacheEvidenceSet` | function: function createCacheEvidenceSet({ repository, sourceCommit, sourceTree = \"\", runtimeCommit = \"\", platform, operations = [], } = {}) | { repository, sourceCommit, sourceTree = \"\", runtimeCommit = \"\", platform, operations = [], } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createCacheEvidenceSet } from \"@kungfu-tech/buildchain\";` | `packages/core/cache-evidence.js:244` |\n| `createCacheOperationReceipt` | function: function createCacheOperationReceipt({ operationId, operation, provider, producer, platform, cacheKey, cacheRoot, outcome, bindings = {}, metrics, evidence, } = {}) | { operationId, operation, provider, producer, platform, cacheKey, cacheRoot, outcome, bindings = {}, metrics, evidence, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createCacheOperationReceipt } from \"@kungfu-tech/buildchain\";` | `packages/core/cache-evidence.js:169` |\n| `createCandidateTimeline` | function: function createCandidateTimeline({ candidate = {}, events = [], generatedAt, } = {}) | { candidate = {}, events = [], generatedAt, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createCandidateTimeline } from \"@kungfu-tech/buildchain\";` | `packages/core/candidate-timeline.js:381` |\n| `createConsumerPublicationDecision` | function: function createConsumerPublicationDecision({ capability, gateAggregate, decision, predicateId, predicateDigest, evidence = {}, now = new Date(), } = {}) | { capability, gateAggregate, decision, predicateId, predicateDigest, evidence = {}, now = new Date(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createConsumerPublicationDecision } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:991` |\n| `createControllerPlan` | function: function createControllerPlan({ descriptor, source = {}, runtime = {}, inputs = {} } = {}) | { descriptor, source = {}, runtime = {}, inputs = {} } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createControllerPlan } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:286` |\n| `createControllerReceipt` | function: function createControllerReceipt({ plan, stages = [], evidence = [], reason = undefined, artifact = \"\" } = {}) | { plan, stages = [], evidence = [], reason = undefined, artifact = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createControllerReceipt } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:362` |\n| `createControllerReceiptReference` | function: function createControllerReceiptReference(receipt) | receipt | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createControllerReceiptReference } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:490` |\n| `createControllerRegistry` | function: function createControllerRegistry({ workflows = [] } = {}) | { workflows = [] } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createControllerRegistry } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:196` |\n| `createDiagnosticsArtifact` | function: function createDiagnosticsArtifact({ cwd = process.cwd(), logPath = \"\", artifactPaths = [], cacheDirs = [], lifecycleObservability = undefined, processSamples = [], processSummary = undefined, requestedParallelism = 0, sourceCheckout = undefined, compilerCachePreparation = undefined, links = {}, } = {}) | { cwd = process.cwd(), logPath = \"\", artifactPaths = [], cacheDirs = [], lifecycleObservability = undefined, processSamples = [], processSummary = undefined, requestedParallelism = 0, sourceCheckout = undefined, compilerCachePreparation = undefined, links = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createDiagnosticsArtifact } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:1408` |\n| `createGitHubArtifactAttestationEvidence` | function: function createGitHubArtifactAttestationEvidence({ preparation, attestationId, attestationUrl, bundlePath, workflow = {}, } = {}) | { preparation, attestationId, attestationUrl, bundlePath, workflow = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createGitHubArtifactAttestationEvidence } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:474` |\n| `createGitHubArtifactAttestationPolicy` | function: function createGitHubArtifactAttestationPolicy(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGitHubArtifactAttestationPolicy } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:204` |\n| `createGitHubArtifactAttestationVerificationPlan` | function: function createGitHubArtifactAttestationVerificationPlan({ artifactPath, bundlePath, evidence, } = {}) | { artifactPath, bundlePath, evidence, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGitHubArtifactAttestationVerificationPlan } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:524` |\n| `createGithubGovernanceRolloutPlan` | function: function createGithubGovernanceRolloutPlan({ repository, targetRef, inventory, rollbackSnapshot, rollbackProtectionExists = true, desiredProtection, } = {}) | { repository, targetRef, inventory, rollbackSnapshot, rollbackProtectionExists = true, desiredProtection, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGithubGovernanceRolloutPlan } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:932` |\n| `createGitHubIssueRequest` | function: function createGitHubIssueRequest({ token, apiUrl = process.env.GITHUB_API_URL \\|\\| \"https://api.github.com\", fetchImpl = globalThis.fetch, retryDelaysMs = DEFAULT_RETRY_DELAYS_MS, } = {}) | { token, apiUrl = process.env.GITHUB_API_URL \\|\\| \"https://api.github.com\", fetchImpl = globalThis.fetch, retryDelaysMs = DEFAULT_RETRY_DELAYS_MS, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGitHubIssueRequest } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:393` |\n| `createGithubRulesetBypassRolloutPlan` | function: function createGithubRulesetBypassRolloutPlan({ repository, rulesetId, inventory, rollbackSnapshot, } = {}) | { repository, rulesetId, inventory, rollbackSnapshot, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGithubRulesetBypassRolloutPlan } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:1110` |\n| `createGithubRulesetGovernanceRolloutPlan` | function: function createGithubRulesetGovernanceRolloutPlan({ repository, targetRef, rulesetId, rulesetName, inventory, rollbackSnapshot, desiredProtection, } = {}) | { repository, targetRef, rulesetId, rulesetName, inventory, rollbackSnapshot, desiredProtection, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGithubRulesetGovernanceRolloutPlan } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:1189` |\n| `createKfd1ReleaseGateEvidence` | function: function createKfd1ReleaseGateEvidence({ cwd = process.cwd(), artifactRoot = \"\", artifacts = [], witnesses = [], verifiedAt = new Date().toISOString(), metadata = resolveKfd1Metadata(), } = {}) | { cwd = process.cwd(), artifactRoot = \"\", artifacts = [], witnesses = [], verifiedAt = new Date().toISOString(), metadata = resolveKfd1Metadata(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfd1ReleaseGateEvidence } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:977` |\n| `createKfd3CollaborationInterfaceReleaseGateEvidence` | function: function createKfd3CollaborationInterfaceReleaseGateEvidence({ prebuildWitnesses = [], artifactWitnesses = [], prebuildWitnessMetas = [], artifactWitnessMetas = [], artifactCommandMeta = undefined, verifiedAt = new Date().toISOString(), metadata = resolveKfd3Metadata(), } = {}) | { prebuildWitnesses = [], artifactWitnesses = [], prebuildWitnessMetas = [], artifactWitnessMetas = [], artifactCommandMeta = undefined, verifiedAt = new Date().toISOString(), metadata = resolveKfd3Metadata(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfd3CollaborationInterfaceReleaseGateEvidence } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:1132` |\n| `createKfd3SurfaceWitness` | function: function createKfd3SurfaceWitness({ cwd = process.cwd(), registryPath = \"\", kind = \"prebuild\", sourceSha = \"\", artifactPath = \"\", } = {}) | { cwd = process.cwd(), registryPath = \"\", kind = \"prebuild\", sourceSha = \"\", artifactPath = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | network | `import { createKfd3SurfaceWitness } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd3-surface-register.js:702` |\n| `createKfdBadgeSpecsFromStandards` | function: function createKfdBadgeSpecsFromStandards(standardsMetadata) | standardsMetadata | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfdBadgeSpecsFromStandards } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:126` |\n| `createKfdSupportProjection` | function: function createKfdSupportProjection({ matrix, matrixRoot = \"\", gateResults = [], authorityPath = \".buildchain/kfd/support-matrix.json\", expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {}) | { matrix, matrixRoot = \"\", gateResults = [], authorityPath = \".buildchain/kfd/support-matrix.json\", expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfdSupportProjection } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:716` |\n| `createKungfuBuildInfoProjection` | function: function createKungfuBuildInfoProjection({ moduleFact, cwd = process.cwd(), now = nowIso() } = {}) | { moduleFact, cwd = process.cwd(), now = nowIso() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKungfuBuildInfoProjection } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:520` |\n| `createManualUpstreamPickupCapture` | function: function createManualUpstreamPickupCapture({ plan, expectedDownstreamBaseSha, }) | { plan, expectedDownstreamBaseSha, } | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createManualUpstreamPickupCapture } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-pickup.js:361` |\n| `createManualUpstreamPickupPlan` | function: function createManualUpstreamPickupPlan({ config: configInput, sourceId, channel, currentVersion, upstreamRelease, }) | { config: configInput, sourceId, channel, currentVersion, upstreamRelease, } | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createManualUpstreamPickupPlan } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-pickup.js:303` |\n| `createPackageReleasePropagationCapture` | function: function createPackageReleasePropagationCapture({ config: configInput, upstreamRelease: upstreamReleaseInput, expectedBaseShas = {}, } = {}) | { config: configInput, upstreamRelease: upstreamReleaseInput, expectedBaseShas = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPackageReleasePropagationCapture } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-capture.js:101` |\n| `createPaperAlphaPlan` | function: function createPaperAlphaPlan({ cwd = process.cwd(), sourceRef = \"\", targetRef = \"\", } = {}) | { cwd = process.cwd(), sourceRef = \"\", targetRef = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPaperAlphaPlan } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:2655` |\n| `createPaperBuildPlan` | function: function createPaperBuildPlan({ cwd = process.cwd(), sourceSha = \"\", pullToolchain = true, } = {}) | { cwd = process.cwd(), sourceSha = \"\", pullToolchain = true, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPaperBuildPlan } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:2592` |\n| `createPaperResumePlan` | function: function createPaperResumePlan({ cwd = process.cwd(), buildchainRef = \"\", } = {}) | { cwd = process.cwd(), buildchainRef = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { createPaperResumePlan } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:2713` |\n| `createPaperWorkStartPlan` | function: function createPaperWorkStartPlan({ cwd = process.cwd(), topic = \"\", branch = \"\", buildchainSha = \"\", } = {}) | { cwd = process.cwd(), topic = \"\", branch = \"\", buildchainSha = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPaperWorkStartPlan } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-work.js:41` |\n| `createPaperWorkSubmitPlan` | function: function createPaperWorkSubmitPlan({ cwd = process.cwd(), pullRequests = [], pullRequestObservation = { ok: true }, buildchainSha = \"\", } = {}) | { cwd = process.cwd(), pullRequests = [], pullRequestObservation = { ok: true }, buildchainSha = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPaperWorkSubmitPlan } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-work.js:207` |\n| `createPortableDevCachePlan` | function: function createPortableDevCachePlan(manifest) | manifest | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPortableDevCachePlan } from \"@kungfu-tech/buildchain\";` | `packages/core/portable-dev-cache.js:172` |\n| `createPortableDevCacheReceipt` | function: function createPortableDevCacheReceipt({ plan, matchedKey = \"\", cacheHit = \"\", validationStatus = \"pass\", validationReason = \"\", coldFallbackStatus = \"not-run\", }) | { plan, matchedKey = \"\", cacheHit = \"\", validationStatus = \"pass\", validationReason = \"\", coldFallbackStatus = \"not-run\", } | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPortableDevCacheReceipt } from \"@kungfu-tech/buildchain\";` | `packages/core/portable-dev-cache.js:226` |\n| `createPublicationAdmission` | function: function createPublicationAdmission(input = {}) | input = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPublicationAdmission } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:236` |\n| `createPublicationArtifactCandidate` | function: function createPublicationArtifactCandidate({ repository, sourceSha, sourceTreeSha, runtimeSha, manifest, passport, controllerReceipt, files = [], } = {}) | { repository, sourceSha, sourceTreeSha, runtimeSha, manifest, passport, controllerReceipt, files = [], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationArtifactCandidate } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-artifact-candidate.js:55` |\n| `createPublicationArtifactManifestSet` | function: function createPublicationArtifactManifestSet({ repository, sourceSha, sourceTreeSha, manifests = [], payloads = [], } = {}) | { repository, sourceSha, sourceTreeSha, manifests = [], payloads = [], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationArtifactManifestSet } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:303` |\n| `createPublicationAuthorityRegistry` | function: function createPublicationAuthorityRegistry({ descriptors = [], workflows = [] } = {}) | { descriptors = [], workflows = [] } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationAuthorityRegistry } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:121` |\n| `createPublicationControlPlaneAudit` | function: function createPublicationControlPlaneAudit({ repository, workflowPath, publisherWorkflowPath, environment, facts = [], observedAt, expiresAt, } = {}) | { repository, workflowPath, publisherWorkflowPath, environment, facts = [], observedAt, expiresAt, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPublicationControlPlaneAudit } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:208` |\n| `createPublicationGateDecision` | function: function createPublicationGateDecision({ sourceSha, profile, required = false, rationale, policy = {}, } = {}) | { sourceSha, profile, required = false, rationale, policy = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPublicationGateDecision } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:280` |\n| `createPublicationQualificationReceipt` | function: function createPublicationQualificationReceipt({ capability, gateAggregate, consumerDecision, now = new Date(), } = {}) | { capability, gateAggregate, consumerDecision, now = new Date(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationQualificationReceipt } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:1035` |\n| `createPublicationSealedBundle` | function: function createPublicationSealedBundle({ candidate, packageName, packageVersion, npmTarballPath, npmIntegrity, releaseAssetPaths = [], githubReleaseRequired = true, } = {}) | { candidate, packageName, packageVersion, npmTarballPath, npmIntegrity, releaseAssetPaths = [], githubReleaseRequired = true, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationSealedBundle } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-sealed-bundle.js:75` |\n| `createPublicationSourceBundle` | function: function createPublicationSourceBundle({ cwd = process.cwd(), sourcePaths = [], output = \".buildchain/publication/source.tar.gz\", } = {}) | { cwd = process.cwd(), sourcePaths = [], output = \".buildchain/publication/source.tar.gz\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write, subprocess | `import { createPublicationSourceBundle } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-artifact.js:249` |\n| `createReadmeBadgeEndpointRegistry` | function: function createReadmeBadgeEndpointRegistry({ kfdSpecs = undefined, kfdStandards = undefined } = {}) | { kfdSpecs = undefined, kfdStandards = undefined } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { createReadmeBadgeEndpointRegistry } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:133` |\n| `createReleaseActivationReceiptSet` | function: function createReleaseActivationReceiptSet({ transaction, receipts = [], } = {}) | { transaction, receipts = [], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleaseActivationReceiptSet } from \"@kungfu-tech/buildchain\";` | `packages/core/release-activation-transaction.js:311` |\n| `createReleaseActivationTransaction` | function: function createReleaseActivationTransaction({ transactionId, mode = \"shadow\", bindings, owners, } = {}) | { transactionId, mode = \"shadow\", bindings, owners, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleaseActivationTransaction } from \"@kungfu-tech/buildchain\";` | `packages/core/release-activation-transaction.js:103` |\n| `createReleaseCandidatePassport` | function: function createReleaseCandidatePassport({ repository = \"\", pullRequest = {}, targetChannel = \"\", version = \"\", sourceHeadSha = \"\", baseSha = \"\", mergeRefSha = \"\", sourceTreeHash = \"\", buildSummary = {}, buildchain = {}, gateAggregate = undefined, familyEvidence = undefined, controllerReceipts = [], controllerReceiptReferences = [], workflow = {}, createdAt = nowIso(), } = {}) | { repository = \"\", pullRequest = {}, targetChannel = \"\", version = \"\", sourceHeadSha = \"\", baseSha = \"\", mergeRefSha = \"\", sourceTreeHash = \"\", buildSummary = {}, buildchain = {}, gateAggregate = undefined, familyEvidence = undefined, controllerReceipts = [], controllerReceiptReferences = [], workflow = {}, createdAt = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleaseCandidatePassport } from \"@kungfu-tech/buildchain\";` | `packages/core/release-candidate.js:310` |\n| `createReleaseCheckReport` | function: function createReleaseCheckReport({ passport, artifactEvidence, publishEvidence, impact, agentIndex, productMechanism, kfdAgentHubEvidence, kfdSupportEvidence, releaseEvidenceDocuments = [], checkedAt = nowIso(), } = {}) | { passport, artifactEvidence, publishEvidence, impact, agentIndex, productMechanism, kfdAgentHubEvidence, kfdSupportEvidence, releaseEvidenceDocuments = [], checkedAt = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleaseCheckReport } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:2628` |\n| `createReleasePassport` | function: function createReleasePassport({ cwd = process.cwd(), repository = \"\", tag = \"\", sourceSha = \"\", line = \"\", productName = \"Buildchain\", packageName = \"@kungfu-tech/buildchain\", packageVersion = \"\", productMechanismPath = \"product-mechanism.json\", artifactEvidencePath = \"artifact-evidence.json\", impactPath = \"impact.json\", agentIndexPath = \"agent-index.json\", checkReportPath = \"check-report.json\", publishEvidencePath = \"\", transactionStatePath = \"\", assets = [], packageSet = undefined, anchorManifest = undefined, versionMaterial = undefined, publishEvidence = undefined, trustedPublishing = undefined, transaction = undefined, buildSummary = undefined, buildFacts = [], platformArtifactManifests = [], distTagPromotionEvidence = undefined, release = {}, publish = {}, impact = undefined, workflow = {}, kfd1 = undefined, kfd2Claims = [], kfd3 = undefined, kfdSupport = undefined, kfdSupportEvidencePath = \"\", invariantPassports = undefined, releaseEvidence = [], kfdAgentHubEvidence = undefined, kfdAgentHubEvidencePath = \"\", controllerReceipts = [], controllerReceiptReferences = [], githubArtifactAttestations = [], checkedAt = \"\", } = {}) | { cwd = process.cwd(), repository = \"\", tag = \"\", sourceSha = \"\", line = \"\", productName = \"Buildchain\", packageName = \"@kungfu-tech/buildchain\", packageVersion = \"\", productMechanismPath = \"product-mechanism.json\", artifactEvidencePath = \"artifact-evidence.json\", impactPath = \"impact.json\", agentIndexPath = \"agent-index.json\", checkReportPath = \"check-report.json\", publishEvidencePath = \"\", transactionStatePath = \"\", assets = [], packageSet = undefined, anchorManifest = undefined, versionMaterial = undefined, publishEvidence = undefined, trustedPublishing = undefined, transaction = undefined, buildSummary = undefined, buildFacts = [], platformArtifactManifests = [], distTagPromotionEvidence = undefined, release = {}, publish = {}, impact = undefined, workflow = {}, kfd1 = undefined, kfd2Claims = [], kfd3 = undefined, kfdSupport = undefined, kfdSupportEvidencePath = \"\", invariantPassports = undefined, releaseEvidence = [], kfdAgentHubEvidence = undefined, kfdAgentHubEvidencePath = \"\", controllerReceipts = [], controllerReceiptReferences = [], githubArtifactAttestations = [], checkedAt = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleasePassport } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:1214` |\n| `createReleasePassportCheckManifest` | function: function createReleasePassportCheckManifest({ standards = kfdStandards } = {}) | { standards = kfdStandards } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleasePassportCheckManifest } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport-contract.js:147` |\n| `createReleasePropagationLock` | function: function createReleasePropagationLock({ graph, edge, sourceNode, targetNode, upstreamRelease, downstreamChannel, } = {}) | { graph, edge, sourceNode, targetNode, upstreamRelease, downstreamChannel, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleasePropagationLock } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation.js:199` |\n| `createReleasePropagationReceipt` | function: function createReleasePropagationReceipt({ plan, target = \"\", lockResult, prOutcome, stagingState = \"pending\", productionState = \"not-requested\", observedAt = \"\", } = {}) | { plan, target = \"\", lockResult, prOutcome, stagingState = \"pending\", productionState = \"not-requested\", observedAt = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleasePropagationReceipt } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation.js:371` |\n| `createReleasePropagationStageReceipt` | function: function createReleasePropagationStageReceipt({ work, stage, outcome = \"success\", observedAt, actor, summary, evidence, failure = null, } = {}) | { work, stage, outcome = \"success\", observedAt, actor, summary, evidence, failure = null, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleasePropagationStageReceipt } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-work.js:214` |\n| `createReleasePropagationWork` | function: function createReleasePropagationWork({ plan, target = \"\", workContext, expectedDownstreamBaseSha, } = {}) | { plan, target = \"\", workContext, expectedDownstreamBaseSha, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleasePropagationWork } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-work.js:111` |\n| `createReleaseTransaction` | function: function createReleaseTransaction({ repository, version, exactTag = \"\", channel, line = \"\", sourceSha, targetRef, releaseSha, releaseMaterialSha = releaseSha, publishToolingSha = \"\", lifecycleIdentity = \"lifecycle.publish\", statePath = \"\", evidencePath = \"\", actor = \"\", runId = \"\", } = {}) | { repository, version, exactTag = \"\", channel, line = \"\", sourceSha, targetRef, releaseSha, releaseMaterialSha = releaseSha, publishToolingSha = \"\", lifecycleIdentity = \"lifecycle.publish\", statePath = \"\", evidencePath = \"\", actor = \"\", runId = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleaseTransaction } from \"@kungfu-tech/buildchain\";` | `packages/core/publish-transaction.js:197` |\n| `createRunnerProvenance` | function: function createRunnerProvenance({ runnerClass, os, architecture, imageDigest, measurementDigest, baselineDigest = \"\", toolchainDigest = \"\", cacheContractDigest = \"\", taskIsolationDigest = \"\", cleanBaselineProven = false, isolation = \"\", } = {}) | { runnerClass, os, architecture, imageDigest, measurementDigest, baselineDigest = \"\", toolchainDigest = \"\", cacheContractDigest = \"\", taskIsolationDigest = \"\", cleanBaselineProven = false, isolation = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createRunnerProvenance } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:166` |\n| `createStableCandidateLedger` | function: function createStableCandidateLedger({ repository, targetBranch, now = new Date().toISOString() } = {}) | { repository, targetBranch, now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createStableCandidateLedger } from \"@kungfu-tech/buildchain\";` | `packages/core/stable-candidate-ledger.js:56` |\n| `createSurfaceTimestampPolicy` | function: function createSurfaceTimestampPolicy({ generatedAt = \"\", publishedAt = \"\", sourceDateEpoch = process.env.SOURCE_DATE_EPOCH \\|\\| DEFAULT_SOURCE_DATE_EPOCH, sourceRevision = \"\", deterministicInputs = [], timestampPolicy = \"\", timestampFields = [\"generatedAt\", \"publishedAt\"], timestampFieldsParticipateInArtifactDigest = true, artifactDigestScope = \"manifest-and-artifact\", reproducible = true, } = {}) | { generatedAt = \"\", publishedAt = \"\", sourceDateEpoch = process.env.SOURCE_DATE_EPOCH \\|\\| DEFAULT_SOURCE_DATE_EPOCH, sourceRevision = \"\", deterministicInputs = [], timestampPolicy = \"\", timestampFields = [\"generatedAt\", \"publishedAt\"], timestampFieldsParticipateInArtifactDigest = true, artifactDigestScope = \"manifest-and-artifact\", reproducible = true, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createSurfaceTimestampPolicy } from \"@kungfu-tech/buildchain\";` | `packages/core/surface-manifest.js:34` |\n| `createWebSurfaceProductionDecision` | function: function createWebSurfaceProductionDecision({ approved, kind, repository, sourceSha, actor, actorPermission = \"\", releasePr = 0, releaseSource = \"\", reason, } = {}) | { approved, kind, repository, sourceSha, actor, actorPermission = \"\", releasePr = 0, releaseSource = \"\", reason, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createWebSurfaceProductionDecision } from \"@kungfu-tech/buildchain\";` | `packages/core/web-surface-publication-candidate.js:45` |\n| `createWebSurfacePublicationCandidate` | function: function createWebSurfacePublicationCandidate({ repository, sourceSha, sourceTreeSha, runtimeSha, plan, planFileDigest, controllerReceipt, decision, } = {}) | { repository, sourceSha, sourceTreeSha, runtimeSha, plan, planFileDigest, controllerReceipt, decision, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createWebSurfacePublicationCandidate } from \"@kungfu-tech/buildchain\";` | `packages/core/web-surface-publication-candidate.js:79` |\n| `decideChannelCandidate` | function: function decideChannelCandidate(input) | input | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { decideChannelCandidate } from \"@kungfu-tech/buildchain\";` | `packages/core/channel-candidate.js:90` |\n| `DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY` | constant: const DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY | none | value | Import does not declare a throw contract. | none-on-import | `import { DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:6` |\n| `defaultBuildchainLogPath` | function: function defaultBuildchainLogPath({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { defaultBuildchainLogPath } from \"@kungfu-tech/buildchain\";` | `packages/core/logging.js:41` |\n| `defaultPublishEvidencePath` | function: function defaultPublishEvidencePath(version, workspace = process.cwd()) | version, workspace = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { defaultPublishEvidencePath } from \"@kungfu-tech/buildchain\";` | `packages/core/publish-transaction.js:193` |\n| `defaultReleaseStatePath` | function: function defaultReleaseStatePath(version, workspace = process.cwd()) | version, workspace = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { defaultReleaseStatePath } from \"@kungfu-tech/buildchain\";` | `packages/core/publish-transaction.js:185` |\n| `DETACHED_ARTIFACT_SIGNATURE_CONTRACT` | constant: const DETACHED_ARTIFACT_SIGNATURE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { DETACHED_ARTIFACT_SIGNATURE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/detached-artifact-signature.js:10` |\n| `detectKfd3Surfaces` | function: function detectKfd3Surfaces({ cwd = process.cwd(), kinds = [], artifactPath = \"\" } = {}) | { cwd = process.cwd(), kinds = [], artifactPath = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { detectKfd3Surfaces } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd3-surface-register.js:423` |\n| `detectLockfile` | function: function detectLockfile(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { detectLockfile } from \"@kungfu-tech/buildchain\";` | `packages/core/package-manager.js:237` |\n| `detectPackageManager` | function: function detectPackageManager(cwd = process.cwd()) | cwd = process.cwd() | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { detectPackageManager } from \"@kungfu-tech/buildchain\";` | `packages/core/package-manager.js:56` |\n| `detectPublicationAuthoritySignals` | function: function detectPublicationAuthoritySignals(workflowText = \"\") | workflowText = \"\" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { detectPublicationAuthoritySignals } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:104` |\n| `detectRequestedParallelism` | function: function detectRequestedParallelism({ command = \"\", args = [], env = process.env, } = {}) | { command = \"\", args = [], env = process.env, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { detectRequestedParallelism } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:1188` |\n| `detectRequestedParallelismFromProcessSamples` | function: function detectRequestedParallelismFromProcessSamples(samples = []) | samples = [] | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { detectRequestedParallelismFromProcessSamples } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:1223` |\n| `discoverArtifactPassport` | function: async function discoverArtifactPassport({ subject, cwd = process.cwd(), passportLocation = \"\", locatorConfig = \"\", repository = \"\", tag = \"\", githubReleaseBaseUrl = \"\", } = {}) | { subject, cwd = process.cwd(), passportLocation = \"\", locatorConfig = \"\", repository = \"\", tag = \"\", githubReleaseBaseUrl = \"\", } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { discoverArtifactPassport } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-passport.js:499` |\n| `discoverBuildchainRepoFiles` | function: function discoverBuildchainRepoFiles(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { discoverBuildchainRepoFiles } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:143` |\n| `discoverConfiguredDerivedVersionMaterial` | function: function discoverConfiguredDerivedVersionMaterial(cwd = process.cwd(), loadedConfig = loadBuildchainConfig(cwd)) | cwd = process.cwd(), loadedConfig = loadBuildchainConfig(cwd) | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { discoverConfiguredDerivedVersionMaterial } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:1467` |\n| `discoverConfiguredVersionStateFiles` | function: function discoverConfiguredVersionStateFiles(cwd = process.cwd(), loadedConfig = loadBuildchainConfig(cwd)) | cwd = process.cwd(), loadedConfig = loadBuildchainConfig(cwd) | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { discoverConfiguredVersionStateFiles } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:1428` |\n| `discoverKfdStandards` | function: function discoverKfdStandards() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { discoverKfdStandards } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd.js:464` |\n| `discoverPaperFleet` | function: function discoverPaperFleet(root = process.cwd()) | root = process.cwd() | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { discoverPaperFleet } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-fleet.js:23` |\n| `enumerateActionInputs` | function: function enumerateActionInputs({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateActionInputs } from \"@kungfu-tech/buildchain\";` | `packages/core/public-surface-audit.js:91` |\n| `enumerateCliCommandsFromBin` | function: function enumerateCliCommandsFromBin({ root = process.cwd(), binPath = \"bin/buildchain.mjs\", } = {}) | { root = process.cwd(), binPath = \"bin/buildchain.mjs\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateCliCommandsFromBin } from \"@kungfu-tech/buildchain\";` | `packages/core/public-surface-cli.js:93` |\n| `enumerateDocCommandRefs` | function: function enumerateDocCommandRefs({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateDocCommandRefs } from \"@kungfu-tech/buildchain\";` | `packages/core/public-surface-audit.js:115` |\n| `enumerateSitePages` | function: function enumerateSitePages({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateSitePages } from \"@kungfu-tech/buildchain\";` | `packages/core/public-surface-audit.js:106` |\n| `enumerateWorkflowInputs` | function: function enumerateWorkflowInputs({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateWorkflowInputs } from \"@kungfu-tech/buildchain\";` | `packages/core/public-surface-audit.js:74` |\n| `evaluateBuildchainContractLock` | function: function evaluateBuildchainContractLock({ lock, current, runtimeRef = \"\", runtimeSha = \"\", runtimeClass = \"\", compatibilityPolicy = \"\", } = {}) | { lock, current, runtimeRef = \"\", runtimeSha = \"\", runtimeClass = \"\", compatibilityPolicy = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { evaluateBuildchainContractLock } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-contract.js:853` |\n| `evaluateCodeownersAuthority` | function: function evaluateCodeownersAuthority({ source = \"\", sourcePath = \"\", reviewAuthority = \"kungfu-origin\", protectedPaths = PROTECTED_AUTHORITY_PATHS, } = {}) | { source = \"\", sourcePath = \"\", reviewAuthority = \"kungfu-origin\", protectedPaths = PROTECTED_AUTHORITY_PATHS, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluateCodeownersAuthority } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:425` |\n| `evaluateGithubGovernanceSnapshot` | function: function evaluateGithubGovernanceSnapshot({ descriptor = createBuildchainGithubGovernanceAuthority(), repository, targetRef, organizationPlan, codeowners, effectivePolicy, memberships, apiEvidence = {}, observedAt, expiresAt, verifier = {}, } = {}) | { descriptor = createBuildchainGithubGovernanceAuthority(), repository, targetRef, organizationPlan, codeowners, effectivePolicy, memberships, apiEvidence = {}, observedAt, expiresAt, verifier = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { evaluateGithubGovernanceSnapshot } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:694` |\n| `evaluateKfdProductGate` | function: async function evaluateKfdProductGate({ cwd = process.cwd(), input, expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {}) | { cwd = process.cwd(), input, expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluateKfdProductGate } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:465` |\n| `evaluatePublicationControlPlaneSnapshot` | function: function evaluatePublicationControlPlaneSnapshot({ repository, workflowPath, publisherWorkflowPath = workflowPath, environment, branch, packageName, publisherMode = \"npm-trusted-publisher\", requiredStatusCheck = \"check\", snapshot, observedAt, expiresAt, } = {}) | { repository, workflowPath, publisherWorkflowPath = workflowPath, environment, branch, packageName, publisherMode = \"npm-trusted-publisher\", requiredStatusCheck = \"check\", snapshot, observedAt, expiresAt, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluatePublicationControlPlaneSnapshot } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-control-plane-audit.js:75` |\n| `executePaperNpmBootstrap` | function: function executePaperNpmBootstrap(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { executePaperNpmBootstrap } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:2840` |\n| `executePaperWorkStart` | function: function executePaperWorkStart(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { executePaperWorkStart } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-work.js:169` |\n| `executePaperWorkSubmitPush` | function: function executePaperWorkSubmitPush(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { executePaperWorkSubmitPush } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-work.js:357` |\n| `explainArtifactPassport` | function: async function explainArtifactPassport(options = {}) | options = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { explainArtifactPassport } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-passport.js:827` |\n| `explainKfdAgentHub` | function: function explainKfdAgentHub({ cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = \"\" } = {}) | { cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { explainKfdAgentHub } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-agent-hub.js:470` |\n| `explainReleaseLineDryRun` | function: function explainReleaseLineDryRun({ cwd = process.cwd(), targetRef, sha = \"\", sourceRef = \"\", tags, publishTransaction = false, publishCommand = \"\", } = {}) | { cwd = process.cwd(), targetRef, sha = \"\", sourceRef = \"\", tags, publishTransaction = false, publishCommand = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { explainReleaseLineDryRun } from \"@kungfu-tech/buildchain\";` | `packages/core/release-line-dry-run.js:127` |\n| `explainReleasePassport` | function: async function explainReleasePassport({ passportLocation, forAudience = \"human\" } = {}) | { passportLocation, forAudience = \"human\" } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { explainReleasePassport } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:2812` |\n| `FAMILY_RELEASE_EVIDENCE_CONTRACT` | constant: const FAMILY_RELEASE_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { FAMILY_RELEASE_EVIDENCE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-candidate.js:5` |\n| `finalizeBuildchainContractWorld` | function: function finalizeBuildchainContractWorld(contractWorld) | contractWorld | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { finalizeBuildchainContractWorld } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-contract.js:762` |\n| `formatCandidateTimelineReport` | function: function formatCandidateTimelineReport(timeline) | timeline | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { formatCandidateTimelineReport } from \"@kungfu-tech/buildchain\";` | `packages/core/candidate-timeline.js:438` |\n| `formatDiagnosticsSummaryTable` | function: function formatDiagnosticsSummaryTable(summary = {}) | summary = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { formatDiagnosticsSummaryTable } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:1786` |\n| `formatReleaseLineDryRun` | function: function formatReleaseLineDryRun(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { formatReleaseLineDryRun } from \"@kungfu-tech/buildchain\";` | `packages/core/release-line-dry-run.js:267` |\n| `getLifecycleStage` | function: function getLifecycleStage(loadedConfig, name) | loadedConfig, name | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { getLifecycleStage } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:1372` |\n| `getNativeDiagnosticsProfile` | function: function getNativeDiagnosticsProfile(loadedConfig) | loadedConfig | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { getNativeDiagnosticsProfile } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:520` |\n| `getPublishContract` | function: function getPublishContract(loadedConfig) | loadedConfig | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { getPublishContract } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:1376` |\n| `getStableReleasePolicy` | function: function getStableReleasePolicy(loadedConfig) | loadedConfig | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { getStableReleasePolicy } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:328` |\n| `getVersionStrategy` | function: function getVersionStrategy(loadedConfig) | loadedConfig | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { getVersionStrategy } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:1500` |\n| `getWorkspaceInfo` | function: function getWorkspaceInfo(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { getWorkspaceInfo } from \"@kungfu-tech/buildchain\";` | `packages/core/package-manager.js:211` |\n| `GITHUB_ARTIFACT_ATTESTATION_EVIDENCE_CONTRACT` | constant: const GITHUB_ARTIFACT_ATTESTATION_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_EVIDENCE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:9` |\n| `GITHUB_ARTIFACT_ATTESTATION_POLICY_CONTRACT` | constant: const GITHUB_ARTIFACT_ATTESTATION_POLICY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_POLICY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:5` |\n| `GITHUB_ARTIFACT_ATTESTATION_PREDICATE_CONTRACT` | constant: const GITHUB_ARTIFACT_ATTESTATION_PREDICATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_PREDICATE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:7` |\n| `GITHUB_ARTIFACT_ATTESTATION_PREDICATE_TYPE` | constant: const GITHUB_ARTIFACT_ATTESTATION_PREDICATE_TYPE | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_PREDICATE_TYPE } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:13` |\n| `GITHUB_ARTIFACT_ATTESTATION_VERIFICATION_CONTRACT` | constant: const GITHUB_ARTIFACT_ATTESTATION_VERIFICATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_VERIFICATION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:11` |\n| `GITHUB_ARTIFACT_ATTESTATION_WORKFLOW` | constant: const GITHUB_ARTIFACT_ATTESTATION_WORKFLOW | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_WORKFLOW } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:15` |\n| `GITHUB_GOVERNANCE_AUTHORITY_CONTRACT` | constant: const GITHUB_GOVERNANCE_AUTHORITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_GOVERNANCE_AUTHORITY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:3` |\n| `GITHUB_GOVERNANCE_RECEIPT_CONTRACT` | constant: const GITHUB_GOVERNANCE_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_GOVERNANCE_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:5` |\n| `GITHUB_GOVERNANCE_ROLLOUT_CONTRACT` | constant: const GITHUB_GOVERNANCE_ROLLOUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_GOVERNANCE_ROLLOUT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:7` |\n| `GITHUB_GOVERNANCE_RULESET_ROLLOUT_CONTRACT` | constant: const GITHUB_GOVERNANCE_RULESET_ROLLOUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_GOVERNANCE_RULESET_ROLLOUT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:9` |\n| `githubArtifactAttestationRequiredPermissions` | function: function githubArtifactAttestationRequiredPermissions() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { githubArtifactAttestationRequiredPermissions } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:640` |\n| `githubArtifactAttestationSemanticRoot` | function: function githubArtifactAttestationSemanticRoot(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { githubArtifactAttestationSemanticRoot } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:91` |\n| `githubArtifactAttestationSha256Buffer` | function: function githubArtifactAttestationSha256Buffer(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { githubArtifactAttestationSha256Buffer } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:83` |\n| `githubArtifactAttestationSha256File` | function: function githubArtifactAttestationSha256File(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { githubArtifactAttestationSha256File } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:87` |\n| `githubGovernanceDigest` | function: function githubGovernanceDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { githubGovernanceDigest } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:163` |\n| `GitHubIssueRequestError` | class: class GitHubIssueRequestError | none | GitHubIssueRequestError | Construction and method errors follow the linked source implementation. | class-dependent | `import { GitHubIssueRequestError } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:23` |\n| `HOMEBREW_TAP_CHECK_CONTRACT` | constant: const HOMEBREW_TAP_CHECK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { HOMEBREW_TAP_CHECK_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/homebrew.js:6` |\n| `HOMEBREW_TAP_FACTS_CONTRACT` | constant: const HOMEBREW_TAP_FACTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { HOMEBREW_TAP_FACTS_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/homebrew.js:5` |\n| `HOMEBREW_TAP_MANIFEST_CONTRACT` | constant: const HOMEBREW_TAP_MANIFEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { HOMEBREW_TAP_MANIFEST_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/homebrew.js:7` |\n| `IMPACT_LEDGER_CONTRACT` | constant: const IMPACT_LEDGER_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { IMPACT_LEDGER_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:30` |\n| `initKfdAgentHub` | function: function initKfdAgentHub({ cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, write = false, force = false } = {}) | { cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, write = false, force = false } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { initKfdAgentHub } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-agent-hub.js:363` |\n| `inspectKfdAgentHub` | function: function inspectKfdAgentHub({ cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = \"\" } = {}) | { cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { inspectKfdAgentHub } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-agent-hub.js:384` |\n| `KFD_AGENT_HUB_ADOPTION_CONTRACT` | constant: const KFD_AGENT_HUB_ADOPTION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_ADOPTION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-agent-hub.js:9` |\n| `KFD_AGENT_HUB_ADOPTION_SCHEMA` | constant: const KFD_AGENT_HUB_ADOPTION_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_ADOPTION_SCHEMA } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-agent-hub.js:12` |\n| `KFD_AGENT_HUB_DECLARATION` | constant: const KFD_AGENT_HUB_DECLARATION | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_DECLARATION } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-agent-hub.js:7` |\n| `KFD_AGENT_HUB_LOCK_CONTRACT` | constant: const KFD_AGENT_HUB_LOCK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_LOCK_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-agent-hub.js:10` |\n| `KFD_AGENT_HUB_OUTPUT_DIR` | constant: const KFD_AGENT_HUB_OUTPUT_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_OUTPUT_DIR } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-agent-hub.js:8` |\n| `KFD_AGENT_HUB_VERIFICATION_CONTRACT` | constant: const KFD_AGENT_HUB_VERIFICATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_VERIFICATION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-agent-hub.js:11` |\n| `KFD_PRODUCT_GATE_CONTRACT` | constant: const KFD_PRODUCT_GATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_PRODUCT_GATE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:11` |\n| `KFD_PRODUCT_GATE_INPUT_CONTRACT` | constant: const KFD_PRODUCT_GATE_INPUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_PRODUCT_GATE_INPUT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:9` |\n| `KFD_PRODUCT_GATE_INPUT_SCHEMA` | constant: const KFD_PRODUCT_GATE_INPUT_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_PRODUCT_GATE_INPUT_SCHEMA } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:55` |\n| `KFD_PRODUCT_GATE_INPUT_SCHEMA_ID` | constant: const KFD_PRODUCT_GATE_INPUT_SCHEMA_ID | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_PRODUCT_GATE_INPUT_SCHEMA_ID } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:15` |\n| `KFD_SUPPORT_PROJECTION_CONTRACT` | constant: const KFD_SUPPORT_PROJECTION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_SUPPORT_PROJECTION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:13` |\n| `KFD_SUPPORT_PROJECTION_SCHEMA` | constant: const KFD_SUPPORT_PROJECTION_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_SUPPORT_PROJECTION_SCHEMA } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:130` |\n| `KFD_SUPPORT_PROJECTION_SCHEMA_ID` | constant: const KFD_SUPPORT_PROJECTION_SCHEMA_ID | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_SUPPORT_PROJECTION_SCHEMA_ID } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:17` |\n| `kfd1` | constant: const kfd1 | none | value | Import does not declare a throw contract. | none-on-import | `import { kfd1 } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd.js:546` |\n| `KFD1_RELEASE_GATE_CONTRACT` | constant: const KFD1_RELEASE_GATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD1_RELEASE_GATE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:9` |\n| `KFD1_WITNESS_SET_CONTRACT` | constant: const KFD1_WITNESS_SET_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD1_WITNESS_SET_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:10` |\n| `kfd2` | constant: const kfd2 | none | value | Import does not declare a throw contract. | none-on-import | `import { kfd2 } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd.js:561` |\n| `KFD2_PRODUCT_CLAIMS_OUTPUT_CONTRACT` | constant: const KFD2_PRODUCT_CLAIMS_OUTPUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_PRODUCT_CLAIMS_OUTPUT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd2-product-claims.js:23` |\n| `KFD2_PRODUCT_CLAIMS_REGISTRY_CONTRACT` | constant: const KFD2_PRODUCT_CLAIMS_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_PRODUCT_CLAIMS_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd2-product-claims.js:19` |\n| `KFD2_PRODUCT_CLAIMS_VALIDATION_CONTRACT` | constant: const KFD2_PRODUCT_CLAIMS_VALIDATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_PRODUCT_CLAIMS_VALIDATION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd2-product-claims.js:21` |\n| `KFD2_RELEASE_TRUST_PASSPORT_CONTRACT` | constant: const KFD2_RELEASE_TRUST_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_RELEASE_TRUST_PASSPORT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:35` |\n| `KFD2_TRUST_PROOF_CONTRACT` | constant: const KFD2_TRUST_PROOF_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_TRUST_PROOF_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:36` |\n| `kfd3` | constant: const kfd3 | none | value | Import does not declare a throw contract. | none-on-import | `import { kfd3 } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd.js:663` |\n| `KFD3_ARTIFACT_WITNESS_CONTRACT` | constant: const KFD3_ARTIFACT_WITNESS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_ARTIFACT_WITNESS_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:13` |\n| `KFD3_CAPABILITY_QUERY_CONTRACT` | constant: const KFD3_CAPABILITY_QUERY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_CAPABILITY_QUERY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd3-surface-register.js:9` |\n| `KFD3_DEFAULT_REGISTRY_PATH` | constant: const KFD3_DEFAULT_REGISTRY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_DEFAULT_REGISTRY_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd3-surface-register.js:10` |\n| `KFD3_PREBUILD_WITNESS_CONTRACT` | constant: const KFD3_PREBUILD_WITNESS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_PREBUILD_WITNESS_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:12` |\n| `KFD3_RELEASE_GATE_CONTRACT` | constant: const KFD3_RELEASE_GATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_RELEASE_GATE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:11` |\n| `KFD3_SURFACE_AUDIT_CONTRACT` | constant: const KFD3_SURFACE_AUDIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_SURFACE_AUDIT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd3-surface-register.js:8` |\n| `KFD3_SURFACE_DETECTION_CONTRACT` | constant: const KFD3_SURFACE_DETECTION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_SURFACE_DETECTION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd3-surface-register.js:7` |\n| `KFD3_SURFACE_REGISTRY_CONTRACT` | constant: const KFD3_SURFACE_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_SURFACE_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd3-surface-register.js:6` |\n| `kfd4` | constant: const kfd4 | none | value | Import does not declare a throw contract. | none-on-import | `import { kfd4 } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd.js:681` |\n| `kfdProductGateDigest` | function: function kfdProductGateDigest(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { kfdProductGateDigest } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:188` |\n| `kfdProductGates` | constant: const kfdProductGates | none | value | Import does not declare a throw contract. | none-on-import | `import { kfdProductGates } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:859` |\n| `KFX_ADMISSION_INPUTS_CONTRACT` | constant: const KFX_ADMISSION_INPUTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFX_ADMISSION_INPUTS_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-verification-envelope.js:7` |\n| `layout` | constant: const layout | none | value | Import does not declare a throw contract. | none-on-import | `import { layout } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd.js:905` |\n| `LEGACY_BUILDCHAIN_CONFIG_PATH` | constant: const LEGACY_BUILDCHAIN_CONFIG_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_CONFIG_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:8` |\n| `LEGACY_BUILDCHAIN_CONTRACT_LOCK_PATH` | constant: const LEGACY_BUILDCHAIN_CONTRACT_LOCK_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_CONTRACT_LOCK_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:10` |\n| `LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH` | constant: const LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:28` |\n| `LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATHS` | constant: const LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATHS | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATHS } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:29` |\n| `LEGACY_BUILDCHAIN_RELEASE_PASSPORT_PATH` | constant: const LEGACY_BUILDCHAIN_RELEASE_PASSPORT_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_RELEASE_PASSPORT_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:34` |\n| `listArtifactSigningProfiles` | function: function listArtifactSigningProfiles() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { listArtifactSigningProfiles } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing.js:103` |\n| `listKfdSchemas` | function: function listKfdSchemas({ standard = \"\" } = {}) | { standard = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { listKfdSchemas } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd.js:492` |\n| `loadBuildchainConfig` | function: function loadBuildchainConfig(cwd = process.cwd()) | cwd = process.cwd() | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { loadBuildchainConfig } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:158` |\n| `loadConfiguredAnchorManifest` | function: function loadConfiguredAnchorManifest(cwd = process.cwd(), loadedConfig = loadBuildchainConfig(cwd)) | cwd = process.cwd(), loadedConfig = loadBuildchainConfig(cwd) | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { loadConfiguredAnchorManifest } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:1509` |\n| `makeReleasePassportFixtureAssets` | function: function makeReleasePassportFixtureAssets(dir) | dir | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { makeReleasePassportFixtureAssets } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:2841` |\n| `MANUAL_UPSTREAM_PICKUP_CONFIG_CONTRACT` | constant: const MANUAL_UPSTREAM_PICKUP_CONFIG_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { MANUAL_UPSTREAM_PICKUP_CONFIG_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-pickup.js:16` |\n| `MANUAL_UPSTREAM_PICKUP_PLAN_CONTRACT` | constant: const MANUAL_UPSTREAM_PICKUP_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { MANUAL_UPSTREAM_PICKUP_PLAN_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-pickup.js:18` |\n| `markStableCandidatePromoted` | function: function markStableCandidatePromoted(ledgerInput, versionInput, { stableTag = \"\", stableSha = \"\", now = new Date().toISOString() } = {}) | ledgerInput, versionInput, { stableTag = \"\", stableSha = \"\", now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { markStableCandidatePromoted } from \"@kungfu-tech/buildchain\";` | `packages/core/stable-candidate-ledger.js:229` |\n| `migrateBuildchainLayout` | function: function migrateBuildchainLayout({ cwd = process.cwd(), write = false, force = false } = {}) | { cwd = process.cwd(), write = false, force = false } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { migrateBuildchainLayout } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:287` |\n| `normalizeBuildchainConfig` | function: function normalizeBuildchainConfig(config) | config | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeBuildchainConfig } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:181` |\n| `normalizeBuildchainLogEvent` | function: function normalizeBuildchainLogEvent(input = {}, defaults = {}) | input = {}, defaults = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { normalizeBuildchainLogEvent } from \"@kungfu-tech/buildchain\";` | `packages/core/logging.js:45` |\n| `normalizeCandidateTimelineEvent` | function: function normalizeCandidateTimelineEvent(input = {}) | input = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeCandidateTimelineEvent } from \"@kungfu-tech/buildchain\";` | `packages/core/candidate-timeline.js:74` |\n| `normalizeControllerReceiptReferences` | function: function normalizeControllerReceiptReferences({ receipts = [], references = [], expectedSourceSha = \"\", acceptedSourceShas = [], expectedRuntimeSha = \"\", requirePassed = false, } = {}) | { receipts = [], references = [], expectedSourceSha = \"\", acceptedSourceShas = [], expectedRuntimeSha = \"\", requirePassed = false, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeControllerReceiptReferences } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:531` |\n| `normalizeGitHubArtifactAttestationPolicy` | function: function normalizeGitHubArtifactAttestationPolicy(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeGitHubArtifactAttestationPolicy } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:158` |\n| `normalizeGithubBranchProtectionSnapshot` | function: function normalizeGithubBranchProtectionSnapshot(protection = {}) | protection = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { normalizeGithubBranchProtectionSnapshot } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:1025` |\n| `normalizeGithubRulesetSnapshot` | function: function normalizeGithubRulesetSnapshot(ruleset = {}) | ruleset = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { normalizeGithubRulesetSnapshot } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:1095` |\n| `normalizeIssueRepository` | function: function normalizeIssueRepository(repository = DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY) | repository = DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeIssueRepository } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:33` |\n| `normalizeKfd1ContractWorldWitness` | function: function normalizeKfd1ContractWorldWitness(witness, { metadata = resolveKfd1Metadata() } = {}) | witness, { metadata = resolveKfd1Metadata() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfd1ContractWorldWitness } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:897` |\n| `normalizeKfd3CollaborationInterfaceArtifactWitness` | function: function normalizeKfd3CollaborationInterfaceArtifactWitness(witness, { metadata = resolveKfd3Metadata() } = {}) | witness, { metadata = resolveKfd3Metadata() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfd3CollaborationInterfaceArtifactWitness } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:738` |\n| `normalizeKfd3CollaborationInterfacePrebuildWitness` | function: function normalizeKfd3CollaborationInterfacePrebuildWitness(witness, { metadata = resolveKfd3Metadata() } = {}) | witness, { metadata = resolveKfd3Metadata() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfd3CollaborationInterfacePrebuildWitness } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:667` |\n| `normalizeKfd3DistributionDeclaration` | function: function normalizeKfd3DistributionDeclaration(distribution, { surfaceId = \"surface\" } = {}) | distribution, { surfaceId = \"surface\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfd3DistributionDeclaration } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd3-surface-register.js:73` |\n| `normalizeKfdStandardId` | function: function normalizeKfdStandardId(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfdStandardId } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd.js:455` |\n| `normalizeLifecycleStage` | function: function normalizeLifecycleStage(stage, label = \"lifecycle stage\", lifecycle = {}) | stage, label = \"lifecycle stage\", lifecycle = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeLifecycleStage } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:1333` |\n| `normalizeManualUpstreamPickupConfig` | function: function normalizeManualUpstreamPickupConfig(input) | input | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeManualUpstreamPickupConfig } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-pickup.js:118` |\n| `normalizePackageReleasePropagationConfig` | function: function normalizePackageReleasePropagationConfig(input) | input | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizePackageReleasePropagationConfig } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-capture.js:63` |\n| `normalizeReleasePropagationGraph` | function: function normalizeReleasePropagationGraph(input) | input | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeReleasePropagationGraph } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation.js:163` |\n| `normalizeStableCandidateLedger` | function: function normalizeStableCandidateLedger(input, expected = {}) | input, expected = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeStableCandidateLedger } from \"@kungfu-tech/buildchain\";` | `packages/core/stable-candidate-ledger.js:76` |\n| `PACKAGE_RELEASE_PROPAGATION_CONFIG_CONTRACT` | constant: const PACKAGE_RELEASE_PROPAGATION_CONFIG_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PACKAGE_RELEASE_PROPAGATION_CONFIG_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-capture.js:17` |\n| `PAPER_ALPHA_PLAN_CONTRACT` | constant: const PAPER_ALPHA_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_ALPHA_PLAN_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:90` |\n| `PAPER_BUILD_PLAN_CONTRACT` | constant: const PAPER_BUILD_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_BUILD_PLAN_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:89` |\n| `PAPER_FLEET_AUDIT_CONTRACT` | constant: const PAPER_FLEET_AUDIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_FLEET_AUDIT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-fleet.js:19` |\n| `PAPER_FLEET_UPDATE_PLAN_CONTRACT` | constant: const PAPER_FLEET_UPDATE_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_FLEET_UPDATE_PLAN_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-fleet.js:20` |\n| `PAPER_MIGRATION_CONTRACT` | constant: const PAPER_MIGRATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_MIGRATION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:82` |\n| `PAPER_NPM_BOOTSTRAP_CONTRACT` | constant: const PAPER_NPM_BOOTSTRAP_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_NPM_BOOTSTRAP_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:85` |\n| `PAPER_PATHS` | constant: const PAPER_PATHS | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_PATHS } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-repository.js:7` |\n| `PAPER_PREFLIGHT_CONTRACT` | constant: const PAPER_PREFLIGHT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_PREFLIGHT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:83` |\n| `PAPER_RESUME_PLAN_CONTRACT` | constant: const PAPER_RESUME_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_RESUME_PLAN_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:91` |\n| `PAPER_SCAFFOLD_CONTRACT` | constant: const PAPER_SCAFFOLD_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_SCAFFOLD_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:81` |\n| `PAPER_STATE_ORDER` | constant: const PAPER_STATE_ORDER | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_STATE_ORDER } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:94` |\n| `PAPER_STATUS_CONTRACT` | constant: const PAPER_STATUS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_STATUS_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:84` |\n| `PAPER_VISIBILITY_CONTRACT` | constant: const PAPER_VISIBILITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_VISIBILITY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:92` |\n| `PAPER_WORK_START_PLAN_CONTRACT` | constant: const PAPER_WORK_START_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_WORK_START_PLAN_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-work.js:17` |\n| `PAPER_WORK_SUBMIT_PLAN_CONTRACT` | constant: const PAPER_WORK_SUBMIT_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_WORK_SUBMIT_PLAN_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-work.js:19` |\n| `paperFleetTransitionWorkspace` | function: function paperFleetTransitionWorkspace(workspaceText, lockText) | workspaceText, lockText | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { paperFleetTransitionWorkspace } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-fleet.js:290` |\n| `parseCodeowners` | function: function parseCodeowners(source) | source | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { parseCodeowners } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:401` |\n| `parseIssueLabels` | function: function parseIssueLabels(input = DEFAULT_LABELS) | input = DEFAULT_LABELS | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { parseIssueLabels } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:41` |\n| `planBuildchainLayoutMigration` | function: function planBuildchainLayoutMigration({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { planBuildchainLayoutMigration } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:265` |\n| `planPaperFleetUpdate` | function: function planPaperFleetUpdate(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { planPaperFleetUpdate } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-fleet.js:209` |\n| `planPaperMigration` | function: function planPaperMigration({ cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainSha = \"\", } = {}) | { cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainSha = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { planPaperMigration } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:1013` |\n| `planPaperScaffold` | function: function planPaperScaffold({ cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainRef = \"v3\", buildchainSha = \"\", name = path.basename(path.resolve(cwd)), title = \"\", packageName = \"\", repository = \"\", version = \"0.1.0-alpha.0\", siteBaseUrl = \"\", } = {}) | { cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainRef = \"v3\", buildchainSha = \"\", name = path.basename(path.resolve(cwd)), title = \"\", packageName = \"\", repository = \"\", version = \"0.1.0-alpha.0\", siteBaseUrl = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { planPaperScaffold } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:702` |\n| `planReleaseLineBootstrap` | function: function planReleaseLineBootstrap({ cwd = process.cwd(), major, minor, sourceRef = \"\", initialVersion = \"\", requiredStatusCheck = \"check\", setDefault = true, createAlphaPr = true, approvalCount = 1, bootstrapBranch = \"\", } = {}) | { cwd = process.cwd(), major, minor, sourceRef = \"\", initialVersion = \"\", requiredStatusCheck = \"check\", setDefault = true, createAlphaPr = true, approvalCount = 1, bootstrapBranch = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { planReleaseLineBootstrap } from \"@kungfu-tech/buildchain\";` | `packages/core/release-line-bootstrap.js:140` |\n| `planReleasePropagation` | function: function planReleasePropagation({ graph: graphInput, upstreamRelease: releaseInput, sourceNode = \"\" } = {}) | { graph: graphInput, upstreamRelease: releaseInput, sourceNode = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { planReleasePropagation } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation.js:249` |\n| `planTransactionRecovery` | function: function planTransactionRecovery({ transaction, evidence, validation, explicitOverride = false, } = {}) | { transaction, evidence, validation, explicitOverride = false, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { planTransactionRecovery } from \"@kungfu-tech/buildchain\";` | `packages/core/publish-transaction.js:769` |\n| `prepareGitHubArtifactAttestation` | function: function prepareGitHubArtifactAttestation({ subjectPath, platformManifestPath, releasePassportPath, policy, expectedBuildchainRef = \"\", expectedCallerRepository = \"\", expectedSourceSha = \"\", } = {}) | { subjectPath, platformManifestPath, releasePassportPath, policy, expectedBuildchainRef = \"\", expectedCallerRepository = \"\", expectedSourceSha = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { prepareGitHubArtifactAttestation } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:250` |\n| `preparePublicationNpmPackage` | function: function preparePublicationNpmPackage({ cwd = process.cwd(), outputDir = \".buildchain/publication/npm-package\", packageName = \"\", } = {}) | { cwd = process.cwd(), outputDir = \".buildchain/publication/npm-package\", packageName = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { preparePublicationNpmPackage } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-package.js:120` |\n| `PRODUCT_MECHANISM_CONTRACT` | constant: const PRODUCT_MECHANISM_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PRODUCT_MECHANISM_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:32` |\n| `projectArtifactVerificationEnvelopeToKfx` | function: function projectArtifactVerificationEnvelopeToKfx({ envelope, assessmentTime = Math.floor(Date.now() / 1000), expectedEnvelopeRoot = \"\", expectedIssuer = \"\", expectedPublisher = \"\", expectedContractVersion = \"\", } = {}) | { envelope, assessmentTime = Math.floor(Date.now() / 1000), expectedEnvelopeRoot = \"\", expectedIssuer = \"\", expectedPublisher = \"\", expectedContractVersion = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { projectArtifactVerificationEnvelopeToKfx } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-verification-envelope.js:359` |\n| `PUBLICATION_ADMISSION_CONTRACT` | constant: const PUBLICATION_ADMISSION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ADMISSION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:10` |\n| `PUBLICATION_ARTIFACT_ARCHIVE_CONTRACT` | constant: const PUBLICATION_ARTIFACT_ARCHIVE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_ARCHIVE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-artifact.js:9` |\n| `PUBLICATION_ARTIFACT_CANDIDATE_CONTRACT` | constant: const PUBLICATION_ARTIFACT_CANDIDATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_CANDIDATE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-artifact-candidate.js:5` |\n| `PUBLICATION_ARTIFACT_MANIFEST_CONTRACT` | constant: const PUBLICATION_ARTIFACT_MANIFEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_MANIFEST_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-artifact.js:7` |\n| `PUBLICATION_ARTIFACT_MANIFEST_SET_CONTRACT` | constant: const PUBLICATION_ARTIFACT_MANIFEST_SET_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_MANIFEST_SET_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:24` |\n| `PUBLICATION_ARTIFACT_PASSPORT_CONTRACT` | constant: const PUBLICATION_ARTIFACT_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_PASSPORT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-artifact.js:8` |\n| `PUBLICATION_ARTIFACT_REGISTRY_CONTRACT` | constant: const PUBLICATION_ARTIFACT_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-artifact.js:10` |\n| `PUBLICATION_AUTHORITY_CLASSES` | constant: const PUBLICATION_AUTHORITY_CLASSES | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_AUTHORITY_CLASSES } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:27` |\n| `PUBLICATION_AUTHORITY_REGISTRY_CONTRACT` | constant: const PUBLICATION_AUTHORITY_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_AUTHORITY_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:8` |\n| `PUBLICATION_CAPABILITY_CONTRACT` | constant: const PUBLICATION_CAPABILITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_CAPABILITY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:12` |\n| `PUBLICATION_CONTROL_PLANE_AUDIT_CONTRACT` | constant: const PUBLICATION_CONTROL_PLANE_AUDIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_CONTROL_PLANE_AUDIT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:16` |\n| `PUBLICATION_GATE_DECISION_CONTRACT` | constant: const PUBLICATION_GATE_DECISION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_GATE_DECISION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:18` |\n| `PUBLICATION_NPM_PACKAGE_CONTRACT` | constant: const PUBLICATION_NPM_PACKAGE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_NPM_PACKAGE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-package.js:6` |\n| `PUBLICATION_QUALIFICATION_RECEIPT_CONTRACT` | constant: const PUBLICATION_QUALIFICATION_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_QUALIFICATION_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:22` |\n| `PUBLICATION_REPRODUCIBILITY_RECEIPT_CONTRACT` | constant: const PUBLICATION_REPRODUCIBILITY_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_REPRODUCIBILITY_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-reproducibility.js:12` |\n| `PUBLICATION_SEALED_BUNDLE_CONTRACT` | constant: const PUBLICATION_SEALED_BUNDLE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_SEALED_BUNDLE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-sealed-bundle.js:10` |\n| `publicationArtifactCandidateDigest` | function: function publicationArtifactCandidateDigest(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { publicationArtifactCandidateDigest } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-artifact-candidate.js:19` |\n| `publicationAuthorityDigest` | function: function publicationAuthorityDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { publicationAuthorityDigest } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:72` |\n| `publicationGateAggregateBindings` | function: function publicationGateAggregateBindings(gateAggregate) | gateAggregate | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { publicationGateAggregateBindings } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:408` |\n| `qualifyStableCandidate` | function: function qualifyStableCandidate(ledgerInput, observation, { minimumSoakSeconds = 3600, now = new Date().toISOString() } = {}) | ledgerInput, observation, { minimumSoakSeconds = 3600, now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { qualifyStableCandidate } from \"@kungfu-tech/buildchain\";` | `packages/core/stable-candidate-ledger.js:139` |\n| `queryKfd3Capabilities` | function: async function queryKfd3Capabilities({ cwd = process.cwd(), product = \"\", registryPath = \"\", passportLocation = \"\", artifactPath = \"\", } = {}) | { cwd = process.cwd(), product = \"\", registryPath = \"\", passportLocation = \"\", artifactPath = \"\", } = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { queryKfd3Capabilities } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd3-surface-register.js:824` |\n| `readBuildchainContractLock` | function: function readBuildchainContractLock(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readBuildchainContractLock } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-contract.js:838` |\n| `readBuildchainContractWorld` | function: function readBuildchainContractWorld(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readBuildchainContractWorld } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-contract.js:818` |\n| `readBuildchainLogEvents` | function: function readBuildchainLogEvents(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readBuildchainLogEvents } from \"@kungfu-tech/buildchain\";` | `packages/core/logging.js:75` |\n| `readDiagnosticsArtifact` | function: function readDiagnosticsArtifact(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readDiagnosticsArtifact } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:1468` |\n| `readJsonFromLocation` | function: async function readJsonFromLocation(location, redirectCount = 0, { timeoutMs = 15_000 } = {}) | location, redirectCount = 0, { timeoutMs = 15_000 } = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readJsonFromLocation } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:2694` |\n| `readKfd2ProductClaimsRegistry` | function: function readKfd2ProductClaimsRegistry({ cwd = process.cwd(), registryPath = BUILDCHAIN_KFD2_REGISTRY_PATH, } = {}) | { cwd = process.cwd(), registryPath = BUILDCHAIN_KFD2_REGISTRY_PATH, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readKfd2ProductClaimsRegistry } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd2-product-claims.js:137` |\n| `readKfd3SurfaceRegistry` | function: function readKfd3SurfaceRegistry({ cwd = process.cwd(), registryPath = \"\" } = {}) | { cwd = process.cwd(), registryPath = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readKfd3SurfaceRegistry } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd3-surface-register.js:455` |\n| `readKfdSchema` | function: function readKfdSchema({ standard, schema = \"\" } = {}) | { standard, schema = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readKfdSchema } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd.js:520` |\n| `README_BADGE_BLOCK_END` | constant: const README_BADGE_BLOCK_END | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_BLOCK_END } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:15` |\n| `README_BADGE_BLOCK_START` | constant: const README_BADGE_BLOCK_START | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_BLOCK_START } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:14` |\n| `README_BADGE_FACTS_CONTRACT` | constant: const README_BADGE_FACTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_FACTS_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:12` |\n| `README_BADGE_HOSTED_BASE_URL` | constant: const README_BADGE_HOSTED_BASE_URL | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_HOSTED_BASE_URL } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:16` |\n| `readOptionalIssueBodyFile` | function: function readOptionalIssueBodyFile(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readOptionalIssueBodyFile } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:385` |\n| `readPublishEvidence` | function: function readPublishEvidence(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readPublishEvidence } from \"@kungfu-tech/buildchain\";` | `packages/core/publish-transaction.js:564` |\n| `readReadme` | function: function readReadme({ cwd = process.cwd(), readmePath = \"README.md\" } = {}) | { cwd = process.cwd(), readmePath = \"README.md\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readReadme } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:891` |\n| `readReleasePropagationJson` | function: function readReleasePropagationJson(value, { cwd = process.cwd(), label = \"json\" } = {}) | value, { cwd = process.cwd(), label = \"json\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readReleasePropagationJson } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation.js:305` |\n| `readReleaseTransaction` | function: function readReleaseTransaction(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readReleaseTransaction } from \"@kungfu-tech/buildchain\";` | `packages/core/publish-transaction.js:367` |\n| `recordReleaseActivationPhase` | function: function recordReleaseActivationPhase(transaction, phaseId, { receiptRoots = [], failure = \"\" } = {}) | transaction, phaseId, { receiptRoots = [], failure = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { recordReleaseActivationPhase } from \"@kungfu-tech/buildchain\";` | `packages/core/release-activation-transaction.js:217` |\n| `recordReleasePropagationStage` | function: function recordReleasePropagationStage({ work, expectedWorkRoot, receipt } = {}) | { work, expectedWorkRoot, receipt } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { recordReleasePropagationStage } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-work-transitions.js:45` |\n| `redactBuildchainLogAttributes` | function: function redactBuildchainLogAttributes(attributes = {}) | attributes = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { redactBuildchainLogAttributes } from \"@kungfu-tech/buildchain\";` | `packages/core/logging.js:33` |\n| `redactDiagnosticsValue` | function: function redactDiagnosticsValue(key, value, pattern = DEFAULT_SECRET_KEY_PATTERN) | key, value, pattern = DEFAULT_SECRET_KEY_PATTERN | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { redactDiagnosticsValue } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:953` |\n| `redactIssueText` | function: function redactIssueText(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { redactIssueText } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:51` |\n| `registerKfd3Surfaces` | function: function registerKfd3Surfaces({ cwd = process.cwd(), registryPath = \"\", kinds = [], artifactPath = \"\", product = {}, } = {}) | { cwd = process.cwd(), registryPath = \"\", kinds = [], artifactPath = \"\", product = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { registerKfd3Surfaces } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd3-surface-register.js:502` |\n| `registerStableCandidate` | function: function registerStableCandidate(ledgerInput, candidateInput, { now = new Date().toISOString() } = {}) | ledgerInput, candidateInput, { now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { registerStableCandidate } from \"@kungfu-tech/buildchain\";` | `packages/core/stable-candidate-ledger.js:106` |\n| `RELEASE_ACTIVATION_CONTRACT` | constant: const RELEASE_ACTIVATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_ACTIVATION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-activation-transaction.js:3` |\n| `RELEASE_ACTIVATION_PHASES` | constant: const RELEASE_ACTIVATION_PHASES | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_ACTIVATION_PHASES } from \"@kungfu-tech/buildchain\";` | `packages/core/release-activation-transaction.js:8` |\n| `RELEASE_ACTIVATION_RECEIPT_SET_CONTRACT` | constant: const RELEASE_ACTIVATION_RECEIPT_SET_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_ACTIVATION_RECEIPT_SET_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-activation-transaction.js:5` |\n| `RELEASE_CANDIDATE_PASSPORT_CONTRACT` | constant: const RELEASE_CANDIDATE_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_CANDIDATE_PASSPORT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-candidate.js:4` |\n| `RELEASE_CHECK_REPORT_CONTRACT` | constant: const RELEASE_CHECK_REPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_CHECK_REPORT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:33` |\n| `RELEASE_EVIDENCE_ATTACHMENT_CONTRACT` | constant: const RELEASE_EVIDENCE_ATTACHMENT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_EVIDENCE_ATTACHMENT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:34` |\n| `RELEASE_PASSPORT_CHECK_MANIFEST_CONTRACT` | constant: const RELEASE_PASSPORT_CHECK_MANIFEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PASSPORT_CHECK_MANIFEST_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport-contract.js:9` |\n| `RELEASE_PASSPORT_CONTRACT` | constant: const RELEASE_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PASSPORT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:28` |\n| `RELEASE_PASSPORT_SCHEMA` | constant: const RELEASE_PASSPORT_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PASSPORT_SCHEMA } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport-contract.js:16` |\n| `RELEASE_PASSPORT_SCHEMA_ID` | constant: const RELEASE_PASSPORT_SCHEMA_ID | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PASSPORT_SCHEMA_ID } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport-contract.js:7` |\n| `RELEASE_PROPAGATION_GRAPH_CONTRACT` | constant: const RELEASE_PROPAGATION_GRAPH_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_GRAPH_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation.js:15` |\n| `RELEASE_PROPAGATION_LOCK_CONTRACT` | constant: const RELEASE_PROPAGATION_LOCK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_LOCK_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation.js:17` |\n| `RELEASE_PROPAGATION_PLAN_CONTRACT` | value: RELEASE_PROPAGATION_PLAN_CONTRACT | none | unknown | No narrower error contract was mechanically discoverable. | unknown | `import { RELEASE_PROPAGATION_PLAN_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation.js:1` |\n| `RELEASE_PROPAGATION_RECEIPT_CONTRACT` | constant: const RELEASE_PROPAGATION_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation.js:18` |\n| `RELEASE_PROPAGATION_STAGE_RECEIPT_CONTRACT` | constant: const RELEASE_PROPAGATION_STAGE_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_STAGE_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-work-constants.js:2` |\n| `RELEASE_PROPAGATION_WORK_CONTRACT` | constant: const RELEASE_PROPAGATION_WORK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_WORK_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-work-constants.js:1` |\n| `RELEASE_PROPAGATION_WORK_STAGES` | constant: const RELEASE_PROPAGATION_WORK_STAGES | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_WORK_STAGES } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-work-constants.js:4` |\n| `releaseActivationRoot` | function: function releaseActivationRoot(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { releaseActivationRoot } from \"@kungfu-tech/buildchain\";` | `packages/core/release-activation-transaction.js:38` |\n| `renderBadgeBundleBlock` | function: function renderBadgeBundleBlock(facts) | facts | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { renderBadgeBundleBlock } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:840` |\n| `renderBuildchainContractDriftIssueBody` | function: function renderBuildchainContractDriftIssueBody({ repository = \"\", workflow = \"\", runUrl = \"\", lockPath = \"\", evaluation, } = {}) | { repository = \"\", workflow = \"\", runUrl = \"\", lockPath = \"\", evaluation, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { renderBuildchainContractDriftIssueBody } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-contract.js:957` |\n| `renderHomebrewFormula` | function: function renderHomebrewFormula(facts) | facts | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { renderHomebrewFormula } from \"@kungfu-tech/buildchain\";` | `packages/core/homebrew.js:290` |\n| `renderKfd2ProductClaimOutputs` | function: function renderKfd2ProductClaimOutputs({ cwd = process.cwd(), registryPath = BUILDCHAIN_KFD2_REGISTRY_PATH, outputDir = BUILDCHAIN_KFD2_DIR, version = \"\", channel = \"\", tag = \"\", sourceSha = \"\", } = {}) | { cwd = process.cwd(), registryPath = BUILDCHAIN_KFD2_REGISTRY_PATH, outputDir = BUILDCHAIN_KFD2_DIR, version = \"\", channel = \"\", tag = \"\", sourceSha = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { renderKfd2ProductClaimOutputs } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd2-product-claims.js:321` |\n| `renderReadmeBadgeBlock` | function: function renderReadmeBadgeBlock(facts) | facts | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { renderReadmeBadgeBlock } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:836` |\n| `repairReleasePropagationWork` | function: function repairReleasePropagationWork({ work, expectedWorkRoot, receipt } = {}) | { work, expectedWorkRoot, receipt } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { repairReleasePropagationWork } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-work-transitions.js:88` |\n| `reportBuildchainIssue` | function: async function reportBuildchainIssue(options = {}) | options = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { reportBuildchainIssue } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:292` |\n| `reportWorkflowFrictionIssue` | function: async function reportWorkflowFrictionIssue(options = {}) | options = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { reportWorkflowFrictionIssue } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:378` |\n| `resolveArtifactSigningProfile` | function: function resolveArtifactSigningProfile({ profile = \"auto\", platform = \"\", artifactKind = \"binary\", } = {}) | { profile = \"auto\", platform = \"\", artifactKind = \"binary\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveArtifactSigningProfile } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing.js:111` |\n| `resolveArtifactSubject` | function: async function resolveArtifactSubject(subject, { cwd = process.cwd(), subjectDigest = \"\", subjectKind = \"\", npmRegistryBaseUrl = \"\", } = {}) | subject, { cwd = process.cwd(), subjectDigest = \"\", subjectKind = \"\", npmRegistryBaseUrl = \"\", } = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveArtifactSubject } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-passport.js:368` |\n| `resolveBuildchainConfigPath` | function: function resolveBuildchainConfigPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveBuildchainConfigPath } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:67` |\n| `resolveBuildchainContractLockPath` | function: function resolveBuildchainContractLockPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveBuildchainContractLockPath } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:74` |\n| `resolveGithubGovernanceTargetPolicy` | function: function resolveGithubGovernanceTargetPolicy({ descriptor = BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY, repository, targetRef, } = {}) | { descriptor = BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY, repository, targetRef, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveGithubGovernanceTargetPolicy } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:607` |\n| `resolveKfd1Metadata` | function: function resolveKfd1Metadata() | none | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveKfd1Metadata } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:89` |\n| `resolveKfd2ProductClaimsRegistryPath` | function: function resolveKfd2ProductClaimsRegistryPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveKfd2ProductClaimsRegistryPath } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:81` |\n| `resolveKfd3Metadata` | function: function resolveKfd3Metadata({ requireSchemas = false } = {}) | { requireSchemas = false } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveKfd3Metadata } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:128` |\n| `resolveKfd3SurfaceRegistryPath` | function: function resolveKfd3SurfaceRegistryPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveKfd3SurfaceRegistryPath } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:85` |\n| `resolveNpmRegistryRelease` | function: function resolveNpmRegistryRelease({ source: sourceInput, channel, packageMetadata, attestations, }) | { source: sourceInput, channel, packageMetadata, attestations, } | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveNpmRegistryRelease } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-pickup.js:167` |\n| `resolvePaperRepository` | function: function resolvePaperRepository(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolvePaperRepository } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-repository.js:133` |\n| `resolvePropagationChannel` | function: function resolvePropagationChannel(edge, upstreamChannel) | edge, upstreamChannel | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolvePropagationChannel } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation.js:190` |\n| `resolvePublicationCandidateFile` | function: function resolvePublicationCandidateFile(files = [], candidatePath) | files = [], candidatePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolvePublicationCandidateFile } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-artifact-candidate.js:23` |\n| `resolveReleasePassportPath` | function: function resolveReleasePassportPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveReleasePassportPath } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:92` |\n| `resumeReleasePropagationWork` | function: function resumeReleasePropagationWork(work) | work | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resumeReleasePropagationWork } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-work.js:518` |\n| `revokeStableCandidate` | function: function revokeStableCandidate(ledgerInput, versionInput, { reason, actor = \"\", now = new Date().toISOString() } = {}) | ledgerInput, versionInput, { reason, actor = \"\", now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { revokeStableCandidate } from \"@kungfu-tech/buildchain\";` | `packages/core/stable-candidate-ledger.js:185` |\n| `rollbackReleaseActivationTransaction` | function: function rollbackReleaseActivationTransaction(transaction, { toSiteSourceSha, reason } = {}) | transaction, { toSiteSourceSha, reason } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { rollbackReleaseActivationTransaction } from \"@kungfu-tech/buildchain\";` | `packages/core/release-activation-transaction.js:290` |\n| `runLifecycleStage` | function: function runLifecycleStage({ cwd = process.cwd(), loadedConfig, name, stage, env: extraEnv, timeoutMinutes }) | { cwd = process.cwd(), loadedConfig, name, stage, env: extraEnv, timeoutMinutes } | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { runLifecycleStage } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:1380` |\n| `RUNNER_PROVENANCE_CLASSES` | constant: const RUNNER_PROVENANCE_CLASSES | none | value | Import does not declare a throw contract. | none-on-import | `import { RUNNER_PROVENANCE_CLASSES } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:36` |\n| `RUNNER_PROVENANCE_CONTRACT` | constant: const RUNNER_PROVENANCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RUNNER_PROVENANCE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:14` |\n| `schemas` | constant: const schemas | none | value | Import does not declare a throw contract. | none-on-import | `import { schemas } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd.js:495` |\n| `sealArtifactVerificationReport` | function: function sealArtifactVerificationReport({ report, bindings, kfdAssessment, issuedAt, expiresAt, revocation, } = {}) | { report, bindings, kfdAssessment, issuedAt, expiresAt, revocation, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sealArtifactVerificationReport } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-verification-envelope.js:314` |\n| `selectStableCandidate` | function: function selectStableCandidate(ledgerInput, { releaseNow = \"\", now = new Date().toISOString() } = {}) | ledgerInput, { releaseNow = \"\", now = new Date().toISOString() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { selectStableCandidate } from \"@kungfu-tech/buildchain\";` | `packages/core/stable-candidate-ledger.js:206` |\n| `setStableCandidateHold` | function: function setStableCandidateHold(ledgerInput, enabled, { reason = \"\", now = new Date().toISOString() } = {}) | ledgerInput, enabled, { reason = \"\", now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { setStableCandidateHold } from \"@kungfu-tech/buildchain\";` | `packages/core/stable-candidate-ledger.js:198` |\n| `sha256BuildchainContractJson` | function: function sha256Json(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { sha256BuildchainContractJson } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-contract.js:30` |\n| `sha256File` | function: function sha256File(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write, subprocess | `import { sha256File } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:216` |\n| `sha256Json` | function: function sha256Json(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sha256Json } from \"@kungfu-tech/buildchain\";` | `packages/core/release-candidate.js:90` |\n| `sha256KfdJson` | function: function sha256Json(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { sha256KfdJson } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:50` |\n| `sha256Text` | function: function sha256Text(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sha256Text } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:138` |\n| `sha512IntegrityBuffer` | function: function sha512IntegrityBuffer(buffer) | buffer | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { sha512IntegrityBuffer } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-passport.js:34` |\n| `sha512IntegrityFile` | function: function sha512IntegrityFile(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sha512IntegrityFile } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-passport.js:38` |\n| `shellJoin` | function: function shellJoin(command) | command | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { shellJoin } from \"@kungfu-tech/buildchain\";` | `packages/core/package-manager.js:114` |\n| `signDetachedArtifactRequest` | function: function signDetachedArtifactRequest({ request, privateKey, keyId, authority = {}, } = {}) | { request, privateKey, keyId, authority = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { signDetachedArtifactRequest } from \"@kungfu-tech/buildchain\";` | `packages/core/detached-artifact-signature.js:36` |\n| `STABLE_CANDIDATE_LEDGER_CONTRACT` | constant: const STABLE_CANDIDATE_LEDGER_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { STABLE_CANDIDATE_LEDGER_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/stable-candidate-ledger.js:1` |\n| `STABLE_CANDIDATE_STATES` | constant: const STABLE_CANDIDATE_STATES | none | value | Import does not declare a throw contract. | none-on-import | `import { STABLE_CANDIDATE_STATES } from \"@kungfu-tech/buildchain\";` | `packages/core/stable-candidate-ledger.js:2` |\n| `stableCandidatePromotionRefs` | function: function stableCandidatePromotionRefs(candidateInput, targetBranch) | candidateInput, targetBranch | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { stableCandidatePromotionRefs } from \"@kungfu-tech/buildchain\";` | `packages/core/stable-candidate-ledger.js:264` |\n| `startProcessSampler` | function: function startProcessSampler({ rootPid = process.pid, intervalMs = 15000, label = \"\", command = \"\", args = [], env = process.env, requestedParallelism = 0, onSample = () => undefined, cwd = process.cwd(), } = {}) | { rootPid = process.pid, intervalMs = 15000, label = \"\", command = \"\", args = [], env = process.env, requestedParallelism = 0, onSample = () => undefined, cwd = process.cwd(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { startProcessSampler } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:1362` |\n| `summarizeBuildchainLogEvents` | function: function summarizeBuildchainLogEvents(input = {}) | input = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { summarizeBuildchainLogEvents } from \"@kungfu-tech/buildchain\";` | `packages/core/logging.js:192` |\n| `summarizeDiagnosticsArtifacts` | function: function summarizeDiagnosticsArtifacts(inputs = []) | inputs = [] | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { summarizeDiagnosticsArtifacts } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:1824` |\n| `summarizeLifecycleObservability` | function: function summarizeLifecycleObservability({ events = [], logPath = \"\", artifactScanDurationMs = 0, artifactUploadDurationMs = 0, totalBytes = 0, fileCount = 0, } = {}) | { events = [], logPath = \"\", artifactScanDurationMs = 0, artifactUploadDurationMs = 0, totalBytes = 0, fileCount = 0, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { summarizeLifecycleObservability } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:219` |\n| `summarizeProcessSamples` | function: function summarizeProcessSamples({ samples = [], requestedParallelism = 0, command = \"\", args = [], env = process.env, activeCpuThreshold = 0.1, } = {}) | { samples = [], requestedParallelism = 0, command = \"\", args = [], env = process.env, activeCpuThreshold = 0.1, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { summarizeProcessSamples } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:1254` |\n| `SURFACE_TIMESTAMP_POLICY_CONTRACT` | constant: const SURFACE_TIMESTAMP_POLICY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { SURFACE_TIMESTAMP_POLICY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/surface-manifest.js:1` |\n| `testKfdAgentHub` | function: function testKfdAgentHub({ cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, outputDir = KFD_AGENT_HUB_OUTPUT_DIR, kfdRoot = \"\", run = defaultRun } = {}) | { cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, outputDir = KFD_AGENT_HUB_OUTPUT_DIR, kfdRoot = \"\", run = defaultRun } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { testKfdAgentHub } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-agent-hub.js:399` |\n| `transitionReleaseTransaction` | function: function transitionReleaseTransaction(record, nextState, metadata = {}) | record, nextState, metadata = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { transitionReleaseTransaction } from \"@kungfu-tech/buildchain\";` | `packages/core/publish-transaction.js:256` |\n| `truncateUtf8` | function: function truncateUtf8(text, maxBytes = DEFAULT_MAX_BODY_BYTES) | text, maxBytes = DEFAULT_MAX_BODY_BYTES | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { truncateUtf8 } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:84` |\n| `updateBadgeBundleBlock` | function: function updateBadgeBundleBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { updateBadgeBundleBlock } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:887` |\n| `updateConfiguredVersionStateContents` | function: function updateConfiguredVersionStateContents(files, version) | files, version | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { updateConfiguredVersionStateContents } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:1680` |\n| `updateHomebrewTap` | function: async function updateHomebrewTap({ cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", write = true, } = {}) | { cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", write = true, } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { updateHomebrewTap } from \"@kungfu-tech/buildchain\";` | `packages/core/homebrew.js:390` |\n| `updateReadmeBadgeBlock` | function: function updateReadmeBadgeBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { updateReadmeBadgeBlock } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:874` |\n| `validateAnchoredPackageRelease` | function: function validateAnchoredPackageRelease({ cwd = process.cwd(), requireManifest = true, requirePackageSetOrder = \"platforms-first-main-last\", requireTrustedPublishing = true, requireLifecycleStages = [\"install\", \"build\", \"verify\", \"publish\"], requirePublishGateSourceLock = false, publishSource = undefined, env = process.env, } = {}) | { cwd = process.cwd(), requireManifest = true, requirePackageSetOrder = \"platforms-first-main-last\", requireTrustedPublishing = true, requireLifecycleStages = [\"install\", \"build\", \"verify\", \"publish\"], requirePublishGateSourceLock = false, publishSource = undefined, env = process.env, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateAnchoredPackageRelease } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:325` |\n| `validateArtifactSigningReceipt` | function: function validateArtifactSigningReceipt(receipt, { request } = {}) | receipt, { request } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateArtifactSigningReceipt } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing.js:374` |\n| `validateArtifactSigningRequest` | function: function validateArtifactSigningRequest(request) | request | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateArtifactSigningRequest } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing.js:291` |\n| `validateArtifactSigningResult` | function: function validateArtifactSigningResult(result, { request, receipt } = {}) | result, { request, receipt } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateArtifactSigningResult } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing-result.js:147` |\n| `validateBuildchainConfig` | function: function validateBuildchainConfig(cwd = process.cwd(), { requireConfig = true, requireVersionState = false, requireLifecycleStages = [], } = {}) | cwd = process.cwd(), { requireConfig = true, requireVersionState = false, requireLifecycleStages = [], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateBuildchainConfig } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:1547` |\n| `validateControllerPlan` | function: function validateControllerPlan(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateControllerPlan } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:324` |\n| `validateControllerReceipt` | function: function validateControllerReceipt(receipt, { plan = undefined, expectedSourceSha = \"\", expectedRuntimeSha = \"\", expectedPlanDigest = \"\", } = {}) | receipt, { plan = undefined, expectedSourceSha = \"\", expectedRuntimeSha = \"\", expectedPlanDigest = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateControllerReceipt } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:422` |\n| `validateControllerReceiptReference` | function: function validateControllerReceiptReference(reference, { expectedSourceSha = \"\", acceptedSourceShas = [], expectedRuntimeSha = \"\", requirePassed = false, } = {}) | reference, { expectedSourceSha = \"\", acceptedSourceShas = [], expectedRuntimeSha = \"\", requirePassed = false, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateControllerReceiptReference } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:504` |\n| `validateKfd1ReleaseGateEvidence` | function: function validateKfd1ReleaseGateEvidence(section, { metadata = resolveKfd1Metadata() } = {}) | section, { metadata = resolveKfd1Metadata() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfd1ReleaseGateEvidence } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:1337` |\n| `validateKfd2ProductClaimsRegistry` | function: function validateKfd2ProductClaimsRegistry(registry = {}) | registry = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateKfd2ProductClaimsRegistry } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd2-product-claims.js:152` |\n| `validateKfd3CollaborationInterfaceReleaseGateEvidence` | function: function validateKfd3CollaborationInterfaceReleaseGateEvidence(section, { metadata = resolveKfd3Metadata() } = {}) | section, { metadata = resolveKfd3Metadata() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfd3CollaborationInterfaceReleaseGateEvidence } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:1470` |\n| `validateKfdProductGateResult` | function: function validateKfdProductGateResult(result, { expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {}) | result, { expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfdProductGateResult } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:565` |\n| `validateKfdSupportProjection` | function: function validateKfdSupportProjection(projection, { expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {}) | projection, { expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfdSupportProjection } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:796` |\n| `validateKnownReleasePassportContracts` | function: function validateKnownReleasePassportContracts() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKnownReleasePassportContracts } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:2853` |\n| `validatePackageManagerContract` | function: function validatePackageManagerContract({ cwd = process.cwd(), expectedManager = \"\" } = {}) | { cwd = process.cwd(), expectedManager = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validatePackageManagerContract } from \"@kungfu-tech/buildchain\";` | `packages/core/package-manager.js:18` |\n| `validatePublishEvidence` | function: function validatePublishEvidence({ evidence, version, channel, sourceSha, releaseSha, targetRef = \"\", releaseMaterialSha = releaseSha, publishToolingSha = \"\", requiredArtifacts = [], } = {}) | { evidence, version, channel, sourceSha, releaseSha, targetRef = \"\", releaseMaterialSha = releaseSha, publishToolingSha = \"\", requiredArtifacts = [], } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validatePublishEvidence } from \"@kungfu-tech/buildchain\";` | `packages/core/publish-transaction.js:674` |\n| `validateReleaseActivationReceiptSet` | function: function validateReleaseActivationReceiptSet(receiptSet, { allowShadow = true } = {}) | receiptSet, { allowShadow = true } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateReleaseActivationReceiptSet } from \"@kungfu-tech/buildchain\";` | `packages/core/release-activation-transaction.js:376` |\n| `validateReleaseActivationTransaction` | function: function validateReleaseActivationTransaction(transaction) | transaction | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateReleaseActivationTransaction } from \"@kungfu-tech/buildchain\";` | `packages/core/release-activation-transaction.js:146` |\n| `validateReleaseCandidatePassport` | function: function validateReleaseCandidatePassport({ passport, repository = \"\", targetChannel = \"\", version = \"\", sourceHeadSha = \"\", buildSummary = undefined, requirePlatforms = true, requireFamilyEvidence = false, familyEvidenceRoot = \"\", familyInitiativeId = \"\", familyAssignmentId = \"\", } = {}) | { passport, repository = \"\", targetChannel = \"\", version = \"\", sourceHeadSha = \"\", buildSummary = undefined, requirePlatforms = true, requireFamilyEvidence = false, familyEvidenceRoot = \"\", familyInitiativeId = \"\", familyAssignmentId = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateReleaseCandidatePassport } from \"@kungfu-tech/buildchain\";` | `packages/core/release-candidate.js:404` |\n| `validateReleasePassportSchema` | function: function validateReleasePassportSchema(passport) | passport | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateReleasePassportSchema } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport-contract.js:256` |\n| `verifyArtifactPassport` | function: async function verifyArtifactPassport({ subject, cwd = process.cwd(), passportLocation = \"\", locatorConfig = \"\", repository = \"\", tag = \"\", githubReleaseBaseUrl = \"\", subjectDigest = \"\", subjectKind = \"\", npmRegistryBaseUrl = \"\", verificationEnvelope = undefined, } = {}) | { subject, cwd = process.cwd(), passportLocation = \"\", locatorConfig = \"\", repository = \"\", tag = \"\", githubReleaseBaseUrl = \"\", subjectDigest = \"\", subjectKind = \"\", npmRegistryBaseUrl = \"\", verificationEnvelope = undefined, } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyArtifactPassport } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-passport.js:701` |\n| `verifyArtifactSigningResultFiles` | function: function verifyArtifactSigningResultFiles({ root, request, receipt, result, } = {}) | { root, request, receipt, result, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyArtifactSigningResultFiles } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing-result.js:193` |\n| `verifyArtifactVerificationEnvelope` | function: function verifyArtifactVerificationEnvelope({ envelope, assessmentTime = Math.floor(Date.now() / 1000), expectedEnvelopeRoot = \"\", expectedIssuer = \"\", expectedPublisher = \"\", expectedContractVersion = \"\", } = {}) | { envelope, assessmentTime = Math.floor(Date.now() / 1000), expectedEnvelopeRoot = \"\", expectedIssuer = \"\", expectedPublisher = \"\", expectedContractVersion = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyArtifactVerificationEnvelope } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-verification-envelope.js:144` |\n| `verifyBuildchainLogEvents` | function: function verifyBuildchainLogEvents({ path: filePath = \"\", events: inputEvents = undefined, minEvents = 1, allowErrors = false, requirePhases = [], requireComponents = [], requireEvents = [], } = {}) | { path: filePath = \"\", events: inputEvents = undefined, minEvents = 1, allowErrors = false, requirePhases = [], requireComponents = [], requireEvents = [], } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyBuildchainLogEvents } from \"@kungfu-tech/buildchain\";` | `packages/core/logging.js:230` |\n| `verifyBuildFacts` | function: function verifyBuildFacts({ cwd = process.cwd(), fact, factPath = \"\" } = {}) | { cwd = process.cwd(), fact, factPath = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyBuildFacts } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:423` |\n| `verifyCacheEvidenceSet` | function: function verifyCacheEvidenceSet(receipt) | receipt | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyCacheEvidenceSet } from \"@kungfu-tech/buildchain\";` | `packages/core/cache-evidence.js:273` |\n| `verifyCacheOperationReceipt` | function: function verifyCacheOperationReceipt(receipt) | receipt | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyCacheOperationReceipt } from \"@kungfu-tech/buildchain\";` | `packages/core/cache-evidence.js:226` |\n| `verifyDetachedArtifactSignature` | function: function verifyDetachedArtifactSignature({ request, envelope, publicKey, } = {}) | { request, envelope, publicKey, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyDetachedArtifactSignature } from \"@kungfu-tech/buildchain\";` | `packages/core/detached-artifact-signature.js:82` |\n| `verifyGitHubArtifactAttestationEvidence` | function: function verifyGitHubArtifactAttestationEvidence({ artifactPath, platformManifestPath, releasePassportPath, bundlePath, evidence, verificationResults, } = {}) | { artifactPath, platformManifestPath, releasePassportPath, bundlePath, evidence, verificationResults, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyGitHubArtifactAttestationEvidence } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:563` |\n| `verifyGithubGovernanceReceipt` | function: function verifyGithubGovernanceReceipt(receipt, { expectedOrganization, expectedRepository, expectedRepositoryIdentityRoot, expectedTargetRef, expectedPolicyRoot, expectedVerifierSourceRevision, now = new Date().toISOString(), } = {}) | receipt, { expectedOrganization, expectedRepository, expectedRepositoryIdentityRoot, expectedTargetRef, expectedPolicyRoot, expectedVerifierSourceRevision, now = new Date().toISOString(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyGithubGovernanceReceipt } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:884` |\n| `verifyKfdRecord` | function: async function verifyKfdRecord(record) | record | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyKfdRecord } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:308` |\n| `verifyPortableDevCachePlan` | function: function verifyPortableDevCachePlan(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyPortableDevCachePlan } from \"@kungfu-tech/buildchain\";` | `packages/core/portable-dev-cache.js:211` |\n| `verifyPublicationAdmission` | function: function verifyPublicationAdmission({ admission, registry, runnerProvenance, controlPlaneAudit, publicationEvidence, expected = {}, usedNonces = [], now = new Date(), } = {}) | { admission, registry, runnerProvenance, controlPlaneAudit, publicationEvidence, expected = {}, usedNonces = [], now = new Date(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyPublicationAdmission } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:791` |\n| `verifyPublicationQualificationReceipt` | function: function verifyPublicationQualificationReceipt({ receipt, capability, gateAggregate, expected = {}, usedNonces = [], now = new Date(), } = {}) | { receipt, capability, gateAggregate, expected = {}, usedNonces = [], now = new Date(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyPublicationQualificationReceipt } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:1096` |\n| `verifyPublicationReproducibility` | function: function verifyPublicationReproducibility({ cwd = process.cwd(), sourceSha = \"\", output = DEFAULT_OUTPUT, promote = false, keepWorkspaces = false, pullToolchain = true, packageName = \"\", allowUnpinnedToolchain = false, overlayPaths = [DEFAULT_REGISTRY_INPUT_DIR, DEFAULT_REGISTRY_HYDRATION], } = {}) | { cwd = process.cwd(), sourceSha = \"\", output = DEFAULT_OUTPUT, promote = false, keepWorkspaces = false, pullToolchain = true, packageName = \"\", allowUnpinnedToolchain = false, overlayPaths = [DEFAULT_REGISTRY_INPUT_DIR, DEFAULT_REGISTRY_HYDRATION], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { verifyPublicationReproducibility } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-reproducibility.js:869` |\n| `verifyPublicationSealedBundle` | function: function verifyPublicationSealedBundle({ bundleRoot, manifest } = {}) | { bundleRoot, manifest } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyPublicationSealedBundle } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-sealed-bundle.js:124` |\n| `verifyReleasePassport` | function: async function verifyReleasePassport({ passportLocation, artifactEvidenceLocation = \"\", publishEvidenceLocation = \"\", impactLocation = \"\", agentIndexLocation = \"\", productMechanismLocation = \"\", kfdAgentHubEvidenceLocation = \"\", kfdSupportEvidenceLocation = \"\", checkedAt = nowIso(), } = {}) | { passportLocation, artifactEvidenceLocation = \"\", publishEvidenceLocation = \"\", impactLocation = \"\", agentIndexLocation = \"\", productMechanismLocation = \"\", kfdAgentHubEvidenceLocation = \"\", kfdSupportEvidenceLocation = \"\", checkedAt = nowIso(), } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyReleasePassport } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:2743` |\n| `verifyReleasePropagationWork` | function: function verifyReleasePropagationWork(input) | input | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyReleasePropagationWork } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-work.js:486` |\n| `WEB_SURFACE_PRODUCTION_DECISION_CONTRACT` | constant: const WEB_SURFACE_PRODUCTION_DECISION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { WEB_SURFACE_PRODUCTION_DECISION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/web-surface-publication-candidate.js:7` |\n| `WEB_SURFACE_PUBLICATION_CANDIDATE_CONTRACT` | constant: const WEB_SURFACE_PUBLICATION_CANDIDATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { WEB_SURFACE_PUBLICATION_CANDIDATE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/web-surface-publication-candidate.js:5` |\n| `webSurfacePublicationDigest` | function: function webSurfacePublicationDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { webSurfacePublicationDigest } from \"@kungfu-tech/buildchain\";` | `packages/core/web-surface-publication-candidate.js:21` |\n| `workflowFrictionMarker` | function: function workflowFrictionMarker(fingerprint) | fingerprint | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { workflowFrictionMarker } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:80` |\n| `writeBuildFacts` | function: function writeBuildFacts({ cwd = process.cwd(), fact, output = \"\" } = {}) | { cwd = process.cwd(), fact, output = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { writeBuildFacts } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:549` |\n| `writeDiagnosticsArtifact` | function: function writeDiagnosticsArtifact(filePath, diagnostics) | filePath, diagnostics | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { writeDiagnosticsArtifact } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:1459` |\n| `writeKfd2ProductClaimOutputs` | function: function writeKfd2ProductClaimOutputs(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { writeKfd2ProductClaimOutputs } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd2-product-claims.js:426` |\n| `writeKfd3SurfaceRegistry` | function: function writeKfd3SurfaceRegistry({ cwd = process.cwd(), registryPath = \"\", registry }) | { cwd = process.cwd(), registryPath = \"\", registry } | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { writeKfd3SurfaceRegistry } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd3-surface-register.js:478` |\n| `writeKungfuBuildInfoProjection` | function: function writeKungfuBuildInfoProjection({ cwd = process.cwd(), moduleFact, output } = {}) | { cwd = process.cwd(), moduleFact, output } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { writeKungfuBuildInfoProjection } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:557` |\n| `writePaperFleetUpdate` | function: function writePaperFleetUpdate(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { writePaperFleetUpdate } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-fleet.js:271` |\n| `writePaperMigration` | function: function writePaperMigration(plan) | plan | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { writePaperMigration } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:1129` |\n| `writePaperScaffold` | function: function writePaperScaffold(plan) | plan | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { writePaperScaffold } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:847` |\n| `writePublicationArtifact` | function: function writePublicationArtifact({ cwd = process.cwd(), output = \"\", passportOutput = \"\", registryOutput = \"\", registryInputs = [], sourceSha = \"\", sourceBundle = true, sourceBundlePath = \"\", generatedAt = \"\", } = {}) | { cwd = process.cwd(), output = \"\", passportOutput = \"\", registryOutput = \"\", registryInputs = [], sourceSha = \"\", sourceBundle = true, sourceBundlePath = \"\", generatedAt = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { writePublicationArtifact } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-artifact.js:598` |\n| `writeReleaseLineBootstrapVersionState` | function: function writeReleaseLineBootstrapVersionState({ cwd = process.cwd(), major, minor, sourceRef = \"\", initialVersion = \"\", runVersionStateLifecycle = true, generatedAt = \"\", } = {}) | { cwd = process.cwd(), major, minor, sourceRef = \"\", initialVersion = \"\", runVersionStateLifecycle = true, generatedAt = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { writeReleaseLineBootstrapVersionState } from \"@kungfu-tech/buildchain\";` | `packages/core/release-line-bootstrap.js:237` |\n| `writeReleasePropagationLock` | function: function writeReleasePropagationLock({ plan, target = \"\", cwd = process.cwd(), output = \"\" } = {}) | { plan, target = \"\", cwd = process.cwd(), output = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { writeReleasePropagationLock } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation.js:317` |\n| `writeReleaseTransaction` | function: function writeReleaseTransaction(filePath, record) | filePath, record | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { writeReleaseTransaction } from \"@kungfu-tech/buildchain\";` | `packages/core/publish-transaction.js:376` |\n\n## `@kungfu-tech/buildchain/badges`\n\nTarget: `./packages/core/badges.js`. Public symbols: 17.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `BADGE_BUNDLE_DEFAULT_CLAIMS` | constant: const BADGE_BUNDLE_DEFAULT_CLAIMS | none | value | Import does not declare a throw contract. | none-on-import | `import { BADGE_BUNDLE_DEFAULT_CLAIMS } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:17` |\n| `BADGE_BUNDLE_FACTS_CONTRACT` | constant: const BADGE_BUNDLE_FACTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BADGE_BUNDLE_FACTS_CONTRACT } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:13` |\n| `checkBadgeBundleBlock` | function: function checkBadgeBundleBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkBadgeBundleBlock } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:867` |\n| `checkReadmeBadgeBlock` | function: function checkReadmeBadgeBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkReadmeBadgeBlock } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:848` |\n| `collectBadgeBundleFacts` | function: async function collectBadgeBundleFacts({ cwd = process.cwd(), claims = undefined } = {}) | { cwd = process.cwd(), claims = undefined } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectBadgeBundleFacts } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:790` |\n| `collectReadmeBadgeFacts` | function: async function collectReadmeBadgeFacts({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectReadmeBadgeFacts } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:700` |\n| `createKfdBadgeSpecsFromStandards` | function: function createKfdBadgeSpecsFromStandards(standardsMetadata) | standardsMetadata | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfdBadgeSpecsFromStandards } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:126` |\n| `createReadmeBadgeEndpointRegistry` | function: function createReadmeBadgeEndpointRegistry({ kfdSpecs = undefined, kfdStandards = undefined } = {}) | { kfdSpecs = undefined, kfdStandards = undefined } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { createReadmeBadgeEndpointRegistry } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:133` |\n| `README_BADGE_BLOCK_END` | constant: const README_BADGE_BLOCK_END | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_BLOCK_END } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:15` |\n| `README_BADGE_BLOCK_START` | constant: const README_BADGE_BLOCK_START | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_BLOCK_START } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:14` |\n| `README_BADGE_FACTS_CONTRACT` | constant: const README_BADGE_FACTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_FACTS_CONTRACT } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:12` |\n| `README_BADGE_HOSTED_BASE_URL` | constant: const README_BADGE_HOSTED_BASE_URL | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_HOSTED_BASE_URL } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:16` |\n| `readReadme` | function: function readReadme({ cwd = process.cwd(), readmePath = \"README.md\" } = {}) | { cwd = process.cwd(), readmePath = \"README.md\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readReadme } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:891` |\n| `renderBadgeBundleBlock` | function: function renderBadgeBundleBlock(facts) | facts | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { renderBadgeBundleBlock } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:840` |\n| `renderReadmeBadgeBlock` | function: function renderReadmeBadgeBlock(facts) | facts | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { renderReadmeBadgeBlock } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:836` |\n| `updateBadgeBundleBlock` | function: function updateBadgeBundleBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { updateBadgeBundleBlock } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:887` |\n| `updateReadmeBadgeBlock` | function: function updateReadmeBadgeBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { updateReadmeBadgeBlock } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:874` |\n\n## `@kungfu-tech/buildchain/build-facts`\n\nTarget: `./packages/core/build-facts.js`. Public symbols: 15.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `aggregateBuildFacts` | function: function aggregateBuildFacts({ cwd = process.cwd(), productId = \"\", moduleFacts = [], artifacts = [], now = nowIso(), } = {}) | { cwd = process.cwd(), productId = \"\", moduleFacts = [], artifacts = [], now = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | subprocess | `import { aggregateBuildFacts } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:458` |\n| `BUILD_FACTS_GIT_CONTRACT` | constant: const BUILD_FACTS_GIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_GIT_CONTRACT } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:9` |\n| `BUILD_FACTS_LEGACY_KUNGFU_BUILDINFO_CONTRACT` | constant: const BUILD_FACTS_LEGACY_KUNGFU_BUILDINFO_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_LEGACY_KUNGFU_BUILDINFO_CONTRACT } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:14` |\n| `BUILD_FACTS_MODULE_CONTRACT` | constant: const BUILD_FACTS_MODULE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_MODULE_CONTRACT } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:11` |\n| `BUILD_FACTS_PRODUCT_CONTRACT` | constant: const BUILD_FACTS_PRODUCT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_PRODUCT_CONTRACT } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:12` |\n| `BUILD_FACTS_VERIFY_CONTRACT` | constant: const BUILD_FACTS_VERIFY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_VERIFY_CONTRACT } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:13` |\n| `BUILD_FACTS_VERSION_CONTRACT` | constant: const BUILD_FACTS_VERSION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_VERSION_CONTRACT } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:10` |\n| `buildFactsDigest` | function: function buildFactsDigest(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write, subprocess | `import { buildFactsDigest } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:45` |\n| `collectGitSourceFacts` | function: function collectGitSourceFacts({ cwd = process.cwd(), root = \".\" } = {}) | { cwd = process.cwd(), root = \".\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectGitSourceFacts } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:146` |\n| `collectModuleBuildFacts` | function: function collectModuleBuildFacts({ cwd = process.cwd(), moduleId = \"\", moduleRoot = \"\", scope = \"\", versionSource = undefined, versionSourceId = \"\", outputs = [], lifecycle = \"\", platform = currentPlatform(), dependencies = [], now = nowIso(), } = {}) | { cwd = process.cwd(), moduleId = \"\", moduleRoot = \"\", scope = \"\", versionSource = undefined, versionSourceId = \"\", outputs = [], lifecycle = \"\", platform = currentPlatform(), dependencies = [], now = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectModuleBuildFacts } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:302` |\n| `collectVersionSourceFact` | function: function collectVersionSourceFact({ cwd = process.cwd(), source = undefined, sourceId = \"\", now = nowIso() } = {}) | { cwd = process.cwd(), source = undefined, sourceId = \"\", now = nowIso() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { collectVersionSourceFact } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:173` |\n| `createKungfuBuildInfoProjection` | function: function createKungfuBuildInfoProjection({ moduleFact, cwd = process.cwd(), now = nowIso() } = {}) | { moduleFact, cwd = process.cwd(), now = nowIso() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKungfuBuildInfoProjection } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:520` |\n| `verifyBuildFacts` | function: function verifyBuildFacts({ cwd = process.cwd(), fact, factPath = \"\" } = {}) | { cwd = process.cwd(), fact, factPath = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyBuildFacts } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:423` |\n| `writeBuildFacts` | function: function writeBuildFacts({ cwd = process.cwd(), fact, output = \"\" } = {}) | { cwd = process.cwd(), fact, output = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { writeBuildFacts } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:549` |\n| `writeKungfuBuildInfoProjection` | function: function writeKungfuBuildInfoProjection({ cwd = process.cwd(), moduleFact, output } = {}) | { cwd = process.cwd(), moduleFact, output } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { writeKungfuBuildInfoProjection } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:557` |\n\n## `@kungfu-tech/buildchain/core`\n\nTarget: `./packages/core/index.js`. Public symbols: 547.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `abortReleaseActivationTransaction` | function: function abortReleaseActivationTransaction(transaction, reason) | transaction, reason | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { abortReleaseActivationTransaction } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-activation-transaction.js:277` |\n| `AGENT_INDEX_CONTRACT` | constant: const AGENT_INDEX_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { AGENT_INDEX_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:31` |\n| `aggregateBuildFacts` | function: function aggregateBuildFacts({ cwd = process.cwd(), productId = \"\", moduleFacts = [], artifacts = [], now = nowIso(), } = {}) | { cwd = process.cwd(), productId = \"\", moduleFacts = [], artifacts = [], now = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | subprocess | `import { aggregateBuildFacts } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:458` |\n| `aggregateControllerReceipts` | function: function aggregateControllerReceipts({ plans = [], receipts = [] } = {}) | { plans = [], receipts = [] } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { aggregateControllerReceipts } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:448` |\n| `ANCHORED_VERSION_MATERIAL_CONTRACT` | constant: const ANCHORED_VERSION_MATERIAL_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ANCHORED_VERSION_MATERIAL_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/anchored-version-material.js:15` |\n| `appendBuildchainLogEvent` | function: function appendBuildchainLogEvent(filePath, event) | filePath, event | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { appendBuildchainLogEvent } from \"@kungfu-tech/buildchain/core\";` | `packages/core/logging.js:67` |\n| `applySurfaceTimestampPolicy` | function: function applySurfaceTimestampPolicy(manifest, options = {}) | manifest, options = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { applySurfaceTimestampPolicy } from \"@kungfu-tech/buildchain/core\";` | `packages/core/surface-manifest.js:79` |\n| `ARTIFACT_EVIDENCE_CONTRACT` | constant: const ARTIFACT_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_EVIDENCE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:29` |\n| `ARTIFACT_PASSPORT_LOCATOR_CONTRACT` | constant: const ARTIFACT_PASSPORT_LOCATOR_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_PASSPORT_LOCATOR_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-passport.js:11` |\n| `ARTIFACT_PASSPORT_POINTER_CONTRACT` | constant: const ARTIFACT_PASSPORT_POINTER_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_PASSPORT_POINTER_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-passport.js:10` |\n| `ARTIFACT_SIGNING_AUTHORITY_CONTRACT` | constant: const ARTIFACT_SIGNING_AUTHORITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_SIGNING_AUTHORITY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing.js:7` |\n| `ARTIFACT_SIGNING_RECEIPT_CONTRACT` | constant: const ARTIFACT_SIGNING_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_SIGNING_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing.js:5` |\n| `ARTIFACT_SIGNING_REQUEST_CONTRACT` | constant: const ARTIFACT_SIGNING_REQUEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_SIGNING_REQUEST_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing.js:3` |\n| `ARTIFACT_SIGNING_RESULT_CONTRACT` | constant: const ARTIFACT_SIGNING_RESULT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_SIGNING_RESULT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing-result.js:12` |\n| `ARTIFACT_VERIFICATION_CONTRACT` | constant: const ARTIFACT_VERIFICATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_VERIFICATION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-passport.js:9` |\n| `ARTIFACT_VERIFICATION_ENVELOPE_CHECK_CONTRACT` | constant: const ARTIFACT_VERIFICATION_ENVELOPE_CHECK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_VERIFICATION_ENVELOPE_CHECK_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-verification-envelope.js:5` |\n| `ARTIFACT_VERIFICATION_ENVELOPE_CONTRACT` | constant: const ARTIFACT_VERIFICATION_ENVELOPE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_VERIFICATION_ENVELOPE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-verification-envelope.js:3` |\n| `artifactSigningDigest` | function: function artifactSigningDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { artifactSigningDigest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing.js:60` |\n| `artifactSigningEvidenceDigest` | function: function artifactSigningEvidenceDigest(evidence = []) | evidence = [] | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { artifactSigningEvidenceDigest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing-result.js:58` |\n| `artifactVerificationEnvelopeDigest` | function: function artifactVerificationEnvelopeDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { artifactVerificationEnvelopeDigest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-verification-envelope.js:50` |\n| `assertPackageManager` | function: function assertPackageManager(manager) | manager | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { assertPackageManager } from \"@kungfu-tech/buildchain/core\";` | `packages/core/package-manager.js:49` |\n| `assertPublicSurfaceReverseAudit` | function: function assertPublicSurfaceReverseAudit(report) | report | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { assertPublicSurfaceReverseAudit } from \"@kungfu-tech/buildchain/core\";` | `packages/core/public-surface-audit.js:261` |\n| `auditKfd3Surfaces` | function: function auditKfd3Surfaces({ cwd = process.cwd(), registryPath = \"\", kinds = [], artifactPath = \"\", } = {}) | { cwd = process.cwd(), registryPath = \"\", kinds = [], artifactPath = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { auditKfd3Surfaces } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd3-surface-register.js:547` |\n| `BADGE_BUNDLE_DEFAULT_CLAIMS` | constant: const BADGE_BUNDLE_DEFAULT_CLAIMS | none | value | Import does not declare a throw contract. | none-on-import | `import { BADGE_BUNDLE_DEFAULT_CLAIMS } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:17` |\n| `BADGE_BUNDLE_FACTS_CONTRACT` | constant: const BADGE_BUNDLE_FACTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BADGE_BUNDLE_FACTS_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:13` |\n| `BUILD_FACTS_GIT_CONTRACT` | constant: const BUILD_FACTS_GIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_GIT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:9` |\n| `BUILD_FACTS_LEGACY_KUNGFU_BUILDINFO_CONTRACT` | constant: const BUILD_FACTS_LEGACY_KUNGFU_BUILDINFO_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_LEGACY_KUNGFU_BUILDINFO_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:14` |\n| `BUILD_FACTS_MODULE_CONTRACT` | constant: const BUILD_FACTS_MODULE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_MODULE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:11` |\n| `BUILD_FACTS_PRODUCT_CONTRACT` | constant: const BUILD_FACTS_PRODUCT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_PRODUCT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:12` |\n| `BUILD_FACTS_VERIFY_CONTRACT` | constant: const BUILD_FACTS_VERIFY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_VERIFY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:13` |\n| `BUILD_FACTS_VERSION_CONTRACT` | constant: const BUILD_FACTS_VERSION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_VERSION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:10` |\n| `BUILDCHAIN_AGENT_MANUALS` | constant: const BUILDCHAIN_AGENT_MANUALS | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_AGENT_MANUALS } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-agent-manuals.js:1` |\n| `BUILDCHAIN_ANCHORED_PACKAGE_RELEASE_VALIDATION_CONTRACT` | constant: const BUILDCHAIN_ANCHORED_PACKAGE_RELEASE_VALIDATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_ANCHORED_PACKAGE_RELEASE_VALIDATION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:31` |\n| `BUILDCHAIN_CACHE_EVIDENCE_SET_CONTRACT` | constant: const BUILDCHAIN_CACHE_EVIDENCE_SET_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CACHE_EVIDENCE_SET_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/cache-evidence.js:5` |\n| `BUILDCHAIN_CACHE_OPERATION_RECEIPT_CONTRACT` | constant: const BUILDCHAIN_CACHE_OPERATION_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CACHE_OPERATION_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/cache-evidence.js:3` |\n| `BUILDCHAIN_CANDIDATE_TIMELINE_CONTRACT` | constant: const BUILDCHAIN_CANDIDATE_TIMELINE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CANDIDATE_TIMELINE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/candidate-timeline.js:1` |\n| `BUILDCHAIN_CANDIDATE_TIMELINE_EVENT_CONTRACT` | constant: const BUILDCHAIN_CANDIDATE_TIMELINE_EVENT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CANDIDATE_TIMELINE_EVENT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/candidate-timeline.js:3` |\n| `BUILDCHAIN_CONFIG_PATH` | constant: const BUILDCHAIN_CONFIG_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONFIG_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:7` |\n| `BUILDCHAIN_CONSUMER_ISSUE_CONTRACT` | constant: const BUILDCHAIN_CONSUMER_ISSUE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONSUMER_ISSUE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:4` |\n| `BUILDCHAIN_CONTRACT_LOCK` | constant: const BUILDCHAIN_CONTRACT_LOCK | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTRACT_LOCK } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-contract.js:8` |\n| `BUILDCHAIN_CONTRACT_LOCK_PATH` | constant: const BUILDCHAIN_CONTRACT_LOCK_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTRACT_LOCK_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:9` |\n| `BUILDCHAIN_CONTROLLER_AGGREGATE_CONTRACT` | constant: const BUILDCHAIN_CONTROLLER_AGGREGATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTROLLER_AGGREGATE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:6` |\n| `BUILDCHAIN_CONTROLLER_DESCRIPTOR_CONTRACT` | constant: const BUILDCHAIN_CONTROLLER_DESCRIPTOR_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTROLLER_DESCRIPTOR_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:4` |\n| `BUILDCHAIN_CONTROLLER_EVIDENCE_CONTRACT` | constant: const BUILDCHAIN_CONTROLLER_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTROLLER_EVIDENCE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:3` |\n| `BUILDCHAIN_CONTROLLER_REGISTRY_CONTRACT` | constant: const BUILDCHAIN_CONTROLLER_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTROLLER_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:5` |\n| `BUILDCHAIN_DIAGNOSTICS_CONTRACT` | constant: const BUILDCHAIN_DIAGNOSTICS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_DIAGNOSTICS_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:28` |\n| `BUILDCHAIN_DIAGNOSTICS_MANIFEST_CONTRACT` | constant: const BUILDCHAIN_DIAGNOSTICS_MANIFEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_DIAGNOSTICS_MANIFEST_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:33` |\n| `BUILDCHAIN_DIAGNOSTICS_SUMMARY_CONTRACT` | constant: const BUILDCHAIN_DIAGNOSTICS_SUMMARY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_DIAGNOSTICS_SUMMARY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:35` |\n| `BUILDCHAIN_DIR` | constant: const BUILDCHAIN_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_DIR } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:4` |\n| `BUILDCHAIN_GENERATED_DIRS` | constant: const BUILDCHAIN_GENERATED_DIRS | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_GENERATED_DIRS } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:36` |\n| `BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY` | constant: const BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:1363` |\n| `BUILDCHAIN_GITHUB_GOVERNANCE_PROTECTED_PATHS` | constant: const BUILDCHAIN_GITHUB_GOVERNANCE_PROTECTED_PATHS | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_GITHUB_GOVERNANCE_PROTECTED_PATHS } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:1365` |\n| `BUILDCHAIN_JSON_FORMATTING_POLICY` | constant: const BUILDCHAIN_JSON_FORMATTING_POLICY | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_JSON_FORMATTING_POLICY } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:14` |\n| `BUILDCHAIN_KFD_CLAIM_REGISTRY_CONTRACT` | constant: const BUILDCHAIN_KFD_CLAIM_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD_CLAIM_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-kfd-claims.js:14` |\n| `BUILDCHAIN_KFD_COLLABORATION_INTERFACE_CONTRACT` | constant: const BUILDCHAIN_KFD_COLLABORATION_INTERFACE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD_COLLABORATION_INTERFACE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-kfd-claims.js:15` |\n| `BUILDCHAIN_KFD_ROOT` | constant: const BUILDCHAIN_KFD_ROOT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD_ROOT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:11` |\n| `BUILDCHAIN_KFD1_CONTRACT_WORLD_WITNESS_PATH` | constant: const BUILDCHAIN_KFD1_CONTRACT_WORLD_WITNESS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD1_CONTRACT_WORLD_WITNESS_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:16` |\n| `BUILDCHAIN_KFD1_DIR` | constant: const BUILDCHAIN_KFD1_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD1_DIR } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:12` |\n| `BUILDCHAIN_KFD1_RELEASE_GATE_PATH` | constant: const BUILDCHAIN_KFD1_RELEASE_GATE_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD1_RELEASE_GATE_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:17` |\n| `BUILDCHAIN_KFD1_VERIFY_RESULT_PATH` | constant: const BUILDCHAIN_KFD1_VERIFY_RESULT_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD1_VERIFY_RESULT_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:18` |\n| `BUILDCHAIN_KFD2_CLAIM_ARGS_PATH` | constant: const BUILDCHAIN_KFD2_CLAIM_ARGS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_CLAIM_ARGS_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:21` |\n| `BUILDCHAIN_KFD2_CLAIMS_DIR` | constant: const BUILDCHAIN_KFD2_CLAIMS_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_CLAIMS_DIR } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:22` |\n| `BUILDCHAIN_KFD2_DIR` | constant: const BUILDCHAIN_KFD2_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_DIR } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:13` |\n| `BUILDCHAIN_KFD2_REGISTRY_PATH` | constant: const BUILDCHAIN_KFD2_REGISTRY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_REGISTRY_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:19` |\n| `BUILDCHAIN_KFD2_RELEASE_CLAIMS_PATH` | constant: const BUILDCHAIN_KFD2_RELEASE_CLAIMS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_RELEASE_CLAIMS_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:20` |\n| `BUILDCHAIN_KFD3_ARTIFACT_WITNESS_PATH` | constant: const BUILDCHAIN_KFD3_ARTIFACT_WITNESS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_ARTIFACT_WITNESS_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:26` |\n| `BUILDCHAIN_KFD3_CAPABILITY_QUERY_PATH` | constant: const BUILDCHAIN_KFD3_CAPABILITY_QUERY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_CAPABILITY_QUERY_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:27` |\n| `BUILDCHAIN_KFD3_COLLABORATION_INTERFACE_PATH` | constant: const BUILDCHAIN_KFD3_COLLABORATION_INTERFACE_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_COLLABORATION_INTERFACE_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:24` |\n| `BUILDCHAIN_KFD3_DIR` | constant: const BUILDCHAIN_KFD3_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_DIR } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:14` |\n| `BUILDCHAIN_KFD3_PREBUILD_WITNESS_PATH` | constant: const BUILDCHAIN_KFD3_PREBUILD_WITNESS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_PREBUILD_WITNESS_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:25` |\n| `BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH` | constant: const BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:23` |\n| `BUILDCHAIN_KFD4_DIR` | constant: const BUILDCHAIN_KFD4_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD4_DIR } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:15` |\n| `BUILDCHAIN_LAYOUT_DISCOVERY_CONTRACT` | constant: const BUILDCHAIN_LAYOUT_DISCOVERY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LAYOUT_DISCOVERY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:6` |\n| `BUILDCHAIN_LIFECYCLE_OBSERVABILITY_CONTRACT` | constant: const BUILDCHAIN_LIFECYCLE_OBSERVABILITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LIFECYCLE_OBSERVABILITY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:29` |\n| `BUILDCHAIN_LOCKED_SOURCE_CHECKOUT_CONTRACT` | constant: const BUILDCHAIN_LOCKED_SOURCE_CHECKOUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LOCKED_SOURCE_CHECKOUT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:41` |\n| `BUILDCHAIN_LOG_EVENT_CONTRACT` | constant: const BUILDCHAIN_LOG_EVENT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LOG_EVENT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/logging.js:6` |\n| `BUILDCHAIN_LOG_SUMMARY_CONTRACT` | constant: const BUILDCHAIN_LOG_SUMMARY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LOG_SUMMARY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/logging.js:7` |\n| `BUILDCHAIN_PROCESS_SAMPLE_REPORT_CONTRACT` | constant: const BUILDCHAIN_PROCESS_SAMPLE_REPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_PROCESS_SAMPLE_REPORT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:37` |\n| `BUILDCHAIN_PROCESS_SAMPLE_SUMMARY_CONTRACT` | constant: const BUILDCHAIN_PROCESS_SAMPLE_SUMMARY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_PROCESS_SAMPLE_SUMMARY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:39` |\n| `BUILDCHAIN_PUBLIC_SURFACE_AUDIT_CONTRACT` | constant: const BUILDCHAIN_PUBLIC_SURFACE_AUDIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_PUBLIC_SURFACE_AUDIT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/public-surface-audit.js:12` |\n| `BUILDCHAIN_RELEASE_PASSPORT_PATH` | constant: const BUILDCHAIN_RELEASE_PASSPORT_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_RELEASE_PASSPORT_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:33` |\n| `BUILDCHAIN_RUNTIME_CONTRACT_WORLD` | constant: const BUILDCHAIN_RUNTIME_CONTRACT_WORLD | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_RUNTIME_CONTRACT_WORLD } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-contract.js:7` |\n| `BUILDCHAIN_VERSION_PIN_PATH` | constant: const BUILDCHAIN_VERSION_PIN_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_VERSION_PIN_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:5` |\n| `BUILDCHAIN_WORKFLOW_FRICTION_ISSUE_CONTRACT` | constant: const BUILDCHAIN_WORKFLOW_FRICTION_ISSUE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_WORKFLOW_FRICTION_ISSUE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:5` |\n| `buildchainKfdClaims` | constant: const buildchainKfdClaims | none | value | Import does not declare a throw contract. | none-on-import | `import { buildchainKfdClaims } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd.js:896` |\n| `buildchainPublicationAuthorityDescriptors` | function: function buildchainPublicationAuthorityDescriptors() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { buildchainPublicationAuthorityDescriptors } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-publication-authority.js:53` |\n| `buildConsumerIssueReport` | function: function buildConsumerIssueReport(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { buildConsumerIssueReport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:104` |\n| `buildFactsDigest` | function: function buildFactsDigest(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write, subprocess | `import { buildFactsDigest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:45` |\n| `buildWorkflowFrictionIssueReport` | function: function buildWorkflowFrictionIssueReport(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { buildWorkflowFrictionIssueReport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:199` |\n| `cacheEvidenceDigest` | function: function cacheEvidenceDigest(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { cacheEvidenceDigest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/cache-evidence.js:48` |\n| `CHANNEL_CANDIDATE_DECISION_SCHEMA` | constant: const CHANNEL_CANDIDATE_DECISION_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { CHANNEL_CANDIDATE_DECISION_SCHEMA } from \"@kungfu-tech/buildchain/core\";` | `packages/core/channel-candidate.js:5` |\n| `channelCandidateSourceLockRef` | function: function channelCandidateSourceLockRef(targetBranch, sourceSha) | targetBranch, sourceSha | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { channelCandidateSourceLockRef } from \"@kungfu-tech/buildchain/core\";` | `packages/core/channel-candidate.js:84` |\n| `checkBadgeBundleBlock` | function: function checkBadgeBundleBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkBadgeBundleBlock } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:867` |\n| `checkHomebrewTap` | function: async function checkHomebrewTap({ cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", } = {}) | { cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkHomebrewTap } from \"@kungfu-tech/buildchain/core\";` | `packages/core/homebrew.js:335` |\n| `checkKfd2ProductClaimOutputs` | function: function checkKfd2ProductClaimOutputs(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkKfd2ProductClaimOutputs } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd2-product-claims.js:415` |\n| `checkReadmeBadgeBlock` | function: function checkReadmeBadgeBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkReadmeBadgeBlock } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:848` |\n| `claimReleasePropagationWork` | function: function claimReleasePropagationWork({ work, expectedWorkRoot, authority, familyState, } = {}) | { work, expectedWorkRoot, authority, familyState, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { claimReleasePropagationWork } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-work-transitions.js:17` |\n| `classifyProcessCommand` | function: function classifyProcessCommand(command = \"\") | command = \"\" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { classifyProcessCommand } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:1085` |\n| `codeownersForPath` | function: function codeownersForPath(source, candidatePath) | source, candidatePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { codeownersForPath } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:417` |\n| `collectBadgeBundleFacts` | function: async function collectBadgeBundleFacts({ cwd = process.cwd(), claims = undefined } = {}) | { cwd = process.cwd(), claims = undefined } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectBadgeBundleFacts } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:790` |\n| `collectBuildchainDiagnostics` | function: function collectBuildchainDiagnostics({ cwd = process.cwd(), artifactPaths = [] } = {}) | { cwd = process.cwd(), artifactPaths = [] } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectBuildchainDiagnostics } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:248` |\n| `collectCacheDiagnostics` | function: function collectCacheDiagnostics({ cwd = process.cwd(), cacheDirs = [], runCommand = defaultDiagnosticCommandRunner } = {}) | { cwd = process.cwd(), cacheDirs = [], runCommand = defaultDiagnosticCommandRunner } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectCacheDiagnostics } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:922` |\n| `collectCompilerCacheDiagnostics` | function: function collectCompilerCacheDiagnostics({ cwd = process.cwd(), runCommand = defaultDiagnosticCommandRunner, env = process.env, } = {}) | { cwd = process.cwd(), runCommand = defaultDiagnosticCommandRunner, env = process.env, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectCompilerCacheDiagnostics } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:573` |\n| `collectGitDiagnostics` | function: function collectGitDiagnostics({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectGitDiagnostics } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:944` |\n| `collectGitHubReleasePassport` | function: function collectGitHubReleasePassport({ cwd = process.cwd(), tag = \"\", repository = process.env.GITHUB_REPOSITORY \\|\\| \"\", sourceSha = process.env.GITHUB_SHA \\|\\| \"\", line = \"\", outputDir = \".buildchain/release-passport\", assetsJson = \"\", assetsDir = \"\", releaseJson = \"\", productName = \"Buildchain\", packageName = \"@kungfu-tech/buildchain\", packageVersion = \"\", packageSetJson = \"\", publishEvidenceJson = \"\", trustedPublishingJson = \"\", transactionJson = \"\", anchorManifestJson = \"\", versionMaterialJson = \"\", impactJson = \"\", buildSummaryJson = \"\", buildFactsJsons = [], platformManifestJsons = [], distTagEvidenceJson = \"\", kfd1WitnessJsons = [], kfd2ClaimJsons = [], kfd3PrebuildWitnessJsons = [], kfd3ArtifactWitnessJsons = [], kfd3ArtifactVerifyCommand = \"\", kfdSupportMatrixJson = \"\", kfdProductGateJsons = [], invariantPassportJsons = [], invariantPassportCommand = \"\", releaseEvidenceJsons = [], kfdAgentHubEvidenceJson = \"\", controllerReceiptReferences = [], githubArtifactAttestationPolicyJsons = [], basePassportJson = \"\", requireBaseKfd = false, releaseJsonExtra = \"\", publishJson = \"\", workflow = {}, checkedAt = \"\", } = {}) | { cwd = process.cwd(), tag = \"\", repository = process.env.GITHUB_REPOSITORY \\|\\| \"\", sourceSha = process.env.GITHUB_SHA \\|\\| \"\", line = \"\", outputDir = \".buildchain/release-passport\", assetsJson = \"\", assetsDir = \"\", releaseJson = \"\", productName = \"Buildchain\", packageName = \"@kungfu-tech/buildchain\", packageVersion = \"\", packageSetJson = \"\", publishEvidenceJson = \"\", trustedPublishingJson = \"\", transactionJson = \"\", anchorManifestJson = \"\", versionMaterialJson = \"\", impactJson = \"\", buildSummaryJson = \"\", buildFactsJsons = [], platformManifestJsons = [], distTagEvidenceJson = \"\", kfd1WitnessJsons = [], kfd2ClaimJsons = [], kfd3PrebuildWitnessJsons = [], kfd3ArtifactWitnessJsons = [], kfd3ArtifactVerifyCommand = \"\", kfdSupportMatrixJson = \"\", kfdProductGateJsons = [], invariantPassportJsons = [], invariantPassportCommand = \"\", releaseEvidenceJsons = [], kfdAgentHubEvidenceJson = \"\", controllerReceiptReferences = [], githubArtifactAttestationPolicyJsons = [], basePassportJson = \"\", requireBaseKfd = false, releaseJsonExtra = \"\", publishJson = \"\", workflow = {}, checkedAt = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { collectGitHubReleasePassport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:1488` |\n| `collectGitSourceFacts` | function: function collectGitSourceFacts({ cwd = process.cwd(), root = \".\" } = {}) | { cwd = process.cwd(), root = \".\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectGitSourceFacts } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:146` |\n| `collectHomebrewTapFacts` | function: async function collectHomebrewTapFacts({ cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", } = {}) | { cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectHomebrewTapFacts } from \"@kungfu-tech/buildchain/core\";` | `packages/core/homebrew.js:223` |\n| `collectKfdStatus` | function: function collectKfdStatus({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectKfdStatus } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd.js:902` |\n| `collectModuleBuildFacts` | function: function collectModuleBuildFacts({ cwd = process.cwd(), moduleId = \"\", moduleRoot = \"\", scope = \"\", versionSource = undefined, versionSourceId = \"\", outputs = [], lifecycle = \"\", platform = currentPlatform(), dependencies = [], now = nowIso(), } = {}) | { cwd = process.cwd(), moduleId = \"\", moduleRoot = \"\", scope = \"\", versionSource = undefined, versionSourceId = \"\", outputs = [], lifecycle = \"\", platform = currentPlatform(), dependencies = [], now = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectModuleBuildFacts } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:302` |\n| `collectNativeDiagnostics` | function: function collectNativeDiagnostics({ cwd = process.cwd(), profile = undefined, runCommand = defaultDiagnosticCommandRunner, } = {}) | { cwd = process.cwd(), profile = undefined, runCommand = defaultDiagnosticCommandRunner, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectNativeDiagnostics } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:295` |\n| `collectPaperFleetAudit` | function: function collectPaperFleetAudit({ root = process.cwd(), repositories = [], buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainSha = \"\", governance = {}, } = {}) | { root = process.cwd(), repositories = [], buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainSha = \"\", governance = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectPaperFleetAudit } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-fleet.js:158` |\n| `collectPaperPreflight` | function: function collectPaperPreflight({ cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainRef = \"v3\", buildchainSha = \"\", registry = NPM_REGISTRY, offline = false, agentEntryMode = \"contract\", } = {}) | { cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainRef = \"v3\", buildchainSha = \"\", registry = NPM_REGISTRY, offline = false, agentEntryMode = \"contract\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectPaperPreflight } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:2413` |\n| `collectPaperStatus` | function: function collectPaperStatus({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectPaperStatus } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:1471` |\n| `collectProcessTreeSnapshot` | function: function collectProcessTreeSnapshot({ rootPid = process.pid, cwd = process.cwd(), platform = process.platform, runCommand = defaultDiagnosticCommandRunner, } = {}) | { rootPid = process.pid, cwd = process.cwd(), platform = process.platform, runCommand = defaultDiagnosticCommandRunner, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectProcessTreeSnapshot } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:1029` |\n| `collectPublicationArtifact` | function: function collectPublicationArtifact({ cwd = process.cwd(), sourceSha = \"\", sourceBundle = true, sourceBundlePath = \"\", generatedAt = \"\", manifestPath = \"\", passportPath = \"\", } = {}) | { cwd = process.cwd(), sourceSha = \"\", sourceBundle = true, sourceBundlePath = \"\", generatedAt = \"\", manifestPath = \"\", passportPath = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { collectPublicationArtifact } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-artifact.js:271` |\n| `collectPublicationPackageFacts` | function: function collectPublicationPackageFacts({ cwd = process.cwd(), packageName = \"\", outputDir = \".buildchain/publication/npm-package\", } = {}) | { cwd = process.cwd(), packageName = \"\", outputDir = \".buildchain/publication/npm-package\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { collectPublicationPackageFacts } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-package.js:74` |\n| `collectPublicSurfaceReverseAudit` | function: function collectPublicSurfaceReverseAudit({ root = process.cwd(), cliRegistry: suppliedCliRegistry = undefined, workflowRegistry: suppliedWorkflowRegistry = undefined, pageRegistry: suppliedPageRegistry = undefined, } = {}) | { root = process.cwd(), cliRegistry: suppliedCliRegistry = undefined, workflowRegistry: suppliedWorkflowRegistry = undefined, pageRegistry: suppliedPageRegistry = undefined, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectPublicSurfaceReverseAudit } from \"@kungfu-tech/buildchain/core\";` | `packages/core/public-surface-audit.js:161` |\n| `collectReadmeBadgeFacts` | function: async function collectReadmeBadgeFacts({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectReadmeBadgeFacts } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:700` |\n| `collectRunnerDiagnostics` | function: function collectRunnerDiagnostics() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectRunnerDiagnostics } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:468` |\n| `collectToolDiagnostics` | function: function collectToolDiagnostics({ cwd = process.cwd(), tools = [\"node\", \"pnpm\", \"npm\", \"git\", \"cmake\", \"ninja\", \"ccache\", \"sccache\"] } = {}) | { cwd = process.cwd(), tools = [\"node\", \"pnpm\", \"npm\", \"git\", \"cmake\", \"ninja\", \"ccache\", \"sccache\"] } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectToolDiagnostics } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:495` |\n| `collectVersionSourceFact` | function: function collectVersionSourceFact({ cwd = process.cwd(), source = undefined, sourceId = \"\", now = nowIso() } = {}) | { cwd = process.cwd(), source = undefined, sourceId = \"\", now = nowIso() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { collectVersionSourceFact } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:173` |\n| `commandForKungfuUpgrade` | function: function commandForKungfuUpgrade(manager, scope = \"@kungfu-trader\") | manager, scope = \"@kungfu-trader\" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { commandForKungfuUpgrade } from \"@kungfu-tech/buildchain/core\";` | `packages/core/package-manager.js:121` |\n| `commandForRunScript` | function: function commandForRunScript(manager, script) | manager, script | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { commandForRunScript } from \"@kungfu-tech/buildchain/core\";` | `packages/core/package-manager.js:89` |\n| `commandForVersion` | function: function commandForVersion(manager, keyword, options = {}) | manager, keyword, options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { commandForVersion } from \"@kungfu-tech/buildchain/core\";` | `packages/core/package-manager.js:100` |\n| `compileEffectiveGithubGovernancePolicy` | function: function compileEffectiveGithubGovernancePolicy({ branch, defaultBranch, protectedBranch = false, protection, rulesets = [], } = {}) | { branch, defaultBranch, protectedBranch = false, protection, rulesets = [], } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { compileEffectiveGithubGovernancePolicy } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:311` |\n| `completeReleasePropagationWork` | function: function completeReleasePropagationWork({ work, expectedWorkRoot, receipt, completionDecision, } = {}) | { work, expectedWorkRoot, receipt, completionDecision, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { completeReleasePropagationWork } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-work-transitions.js:110` |\n| `computeConsumerIssueFingerprint` | function: function computeConsumerIssueFingerprint(fields = {}) | fields = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { computeConsumerIssueFingerprint } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:64` |\n| `CONSUMER_PUBLICATION_DECISION_CONTRACT` | constant: const CONSUMER_PUBLICATION_DECISION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { CONSUMER_PUBLICATION_DECISION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:20` |\n| `consumerIssueMarker` | function: function consumerIssueMarker(fingerprint) | fingerprint | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { consumerIssueMarker } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:76` |\n| `contractSummary` | function: function contractSummary(contractWorld, runtimeRef = \"\", runtimeSha = \"\") | contractWorld, runtimeRef = \"\", runtimeSha = \"\" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { contractSummary } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-contract.js:945` |\n| `controllerEvidenceDigest` | function: function controllerEvidenceDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { controllerEvidenceDigest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:150` |\n| `createAnchoredVersionMaterialEvidence` | function: function createAnchoredVersionMaterialEvidence({ cwd = process.cwd(), targetChannel = \"\", targetRef = \"\", alphaRef = \"\", releaseRef = \"HEAD\", runLifecycle = true, } = {}) | { cwd = process.cwd(), targetChannel = \"\", targetRef = \"\", alphaRef = \"\", releaseRef = \"HEAD\", runLifecycle = true, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createAnchoredVersionMaterialEvidence } from \"@kungfu-tech/buildchain/core\";` | `packages/core/anchored-version-material.js:118` |\n| `createArtifactEvidence` | function: function createArtifactEvidence({ assets = [], repository = \"\", tag = \"\", sourceSha = \"\", workflow = {} } = {}) | { assets = [], repository = \"\", tag = \"\", sourceSha = \"\", workflow = {} } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createArtifactEvidence } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:1158` |\n| `createArtifactSigningReceipt` | function: function createArtifactSigningReceipt({ request, status = \"passed\", authority = {}, result = {}, signatures = [], reason = \"\", } = {}) | { request, status = \"passed\", authority = {}, result = {}, signatures = [], reason = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createArtifactSigningReceipt } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing.js:313` |\n| `createArtifactSigningRequest` | function: function createArtifactSigningRequest({ source = {}, runtime = {}, artifact = {}, signature = {}, delivery = {}, } = {}) | { source = {}, runtime = {}, artifact = {}, signature = {}, delivery = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createArtifactSigningRequest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing.js:167` |\n| `createArtifactSigningResult` | function: function createArtifactSigningResult({ request, receipt, receiptPath = \"receipt.json\", payload = {}, evidence = [], verification = {}, } = {}) | { request, receipt, receiptPath = \"receipt.json\", payload = {}, evidence = [], verification = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createArtifactSigningResult } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing-result.js:68` |\n| `createBuildchainContractLock` | function: function createBuildchainContractLock({ buildchainRef = \"v3\", resolvedSha = \"\", contractWorld, compatibilityPolicy = DEFAULT_POLICY, acceptedAt = new Date().toISOString(), } = {}) | { buildchainRef = \"v3\", resolvedSha = \"\", contractWorld, compatibilityPolicy = DEFAULT_POLICY, acceptedAt = new Date().toISOString(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createBuildchainContractLock } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-contract.js:787` |\n| `createBuildchainContractWorld` | function: function createBuildchainContractWorld({ root = process.cwd(), packageJson = undefined, controllerRegistry = undefined, } = {}) | { root = process.cwd(), packageJson = undefined, controllerRegistry = undefined, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainContractWorld } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-contract.js:110` |\n| `createBuildchainGithubGovernanceAuthority` | function: function createBuildchainGithubGovernanceAuthority() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainGithubGovernanceAuthority } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:450` |\n| `createBuildchainKfd1Witness` | function: function createBuildchainKfd1Witness({ root = process.cwd(), sourceSha = \"\" } = {}) | { root = process.cwd(), sourceSha = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfd1Witness } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-kfd-claims.js:530` |\n| `createBuildchainKfd2Claims` | function: function createBuildchainKfd2Claims({ root = process.cwd(), witnessFiles = {} } = {}) | { root = process.cwd(), witnessFiles = {} } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfd2Claims } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-kfd-claims.js:687` |\n| `createBuildchainKfd3ArtifactWitness` | function: function createBuildchainKfd3ArtifactWitness({ root = process.cwd(), sourceSha = \"\" } = {}) | { root = process.cwd(), sourceSha = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfd3ArtifactWitness } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-kfd-claims.js:647` |\n| `createBuildchainKfd3PrebuildWitness` | function: function createBuildchainKfd3PrebuildWitness({ root = process.cwd(), sourceSha = \"\" } = {}) | { root = process.cwd(), sourceSha = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfd3PrebuildWitness } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-kfd-claims.js:583` |\n| `createBuildchainKfdClaimRegistry` | function: function createBuildchainKfdClaimRegistry({ root = process.cwd(), sourceSha = \"\" } = {}) | { root = process.cwd(), sourceSha = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfdClaimRegistry } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-kfd-claims.js:510` |\n| `createBuildchainKfdSurfaceRegistry` | function: function createBuildchainKfdSurfaceRegistry({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfdSurfaceRegistry } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-kfd-claims.js:411` |\n| `createBuildchainLayoutDiscovery` | function: function createBuildchainLayoutDiscovery({ cwd = process.cwd(), buildchainVersion = \"\", } = {}) | { cwd = process.cwd(), buildchainVersion = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainLayoutDiscovery } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:99` |\n| `createBuildchainLogger` | function: function createBuildchainLogger(options = {}) | options = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { createBuildchainLogger } from \"@kungfu-tech/buildchain/core\";` | `packages/core/logging.js:300` |\n| `createBuildchainPublicationAuthorityRegistry` | function: function createBuildchainPublicationAuthorityRegistry({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainPublicationAuthorityRegistry } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-publication-authority.js:78` |\n| `createBuildchainPublicClaimDefinitions` | function: function createBuildchainPublicClaimDefinitions() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainPublicClaimDefinitions } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-kfd-claims.js:226` |\n| `createCacheEvidenceSet` | function: function createCacheEvidenceSet({ repository, sourceCommit, sourceTree = \"\", runtimeCommit = \"\", platform, operations = [], } = {}) | { repository, sourceCommit, sourceTree = \"\", runtimeCommit = \"\", platform, operations = [], } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createCacheEvidenceSet } from \"@kungfu-tech/buildchain/core\";` | `packages/core/cache-evidence.js:244` |\n| `createCacheOperationReceipt` | function: function createCacheOperationReceipt({ operationId, operation, provider, producer, platform, cacheKey, cacheRoot, outcome, bindings = {}, metrics, evidence, } = {}) | { operationId, operation, provider, producer, platform, cacheKey, cacheRoot, outcome, bindings = {}, metrics, evidence, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createCacheOperationReceipt } from \"@kungfu-tech/buildchain/core\";` | `packages/core/cache-evidence.js:169` |\n| `createCandidateTimeline` | function: function createCandidateTimeline({ candidate = {}, events = [], generatedAt, } = {}) | { candidate = {}, events = [], generatedAt, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createCandidateTimeline } from \"@kungfu-tech/buildchain/core\";` | `packages/core/candidate-timeline.js:381` |\n| `createConsumerPublicationDecision` | function: function createConsumerPublicationDecision({ capability, gateAggregate, decision, predicateId, predicateDigest, evidence = {}, now = new Date(), } = {}) | { capability, gateAggregate, decision, predicateId, predicateDigest, evidence = {}, now = new Date(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createConsumerPublicationDecision } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:991` |\n| `createControllerPlan` | function: function createControllerPlan({ descriptor, source = {}, runtime = {}, inputs = {} } = {}) | { descriptor, source = {}, runtime = {}, inputs = {} } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createControllerPlan } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:286` |\n| `createControllerReceipt` | function: function createControllerReceipt({ plan, stages = [], evidence = [], reason = undefined, artifact = \"\" } = {}) | { plan, stages = [], evidence = [], reason = undefined, artifact = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createControllerReceipt } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:362` |\n| `createControllerReceiptReference` | function: function createControllerReceiptReference(receipt) | receipt | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createControllerReceiptReference } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:490` |\n| `createControllerRegistry` | function: function createControllerRegistry({ workflows = [] } = {}) | { workflows = [] } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createControllerRegistry } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:196` |\n| `createDiagnosticsArtifact` | function: function createDiagnosticsArtifact({ cwd = process.cwd(), logPath = \"\", artifactPaths = [], cacheDirs = [], lifecycleObservability = undefined, processSamples = [], processSummary = undefined, requestedParallelism = 0, sourceCheckout = undefined, compilerCachePreparation = undefined, links = {}, } = {}) | { cwd = process.cwd(), logPath = \"\", artifactPaths = [], cacheDirs = [], lifecycleObservability = undefined, processSamples = [], processSummary = undefined, requestedParallelism = 0, sourceCheckout = undefined, compilerCachePreparation = undefined, links = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createDiagnosticsArtifact } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:1408` |\n| `createGitHubArtifactAttestationEvidence` | function: function createGitHubArtifactAttestationEvidence({ preparation, attestationId, attestationUrl, bundlePath, workflow = {}, } = {}) | { preparation, attestationId, attestationUrl, bundlePath, workflow = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createGitHubArtifactAttestationEvidence } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:474` |\n| `createGitHubArtifactAttestationPolicy` | function: function createGitHubArtifactAttestationPolicy(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGitHubArtifactAttestationPolicy } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:204` |\n| `createGitHubArtifactAttestationVerificationPlan` | function: function createGitHubArtifactAttestationVerificationPlan({ artifactPath, bundlePath, evidence, } = {}) | { artifactPath, bundlePath, evidence, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGitHubArtifactAttestationVerificationPlan } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:524` |\n| `createGithubGovernanceRolloutPlan` | function: function createGithubGovernanceRolloutPlan({ repository, targetRef, inventory, rollbackSnapshot, rollbackProtectionExists = true, desiredProtection, } = {}) | { repository, targetRef, inventory, rollbackSnapshot, rollbackProtectionExists = true, desiredProtection, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGithubGovernanceRolloutPlan } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:932` |\n| `createGitHubIssueRequest` | function: function createGitHubIssueRequest({ token, apiUrl = process.env.GITHUB_API_URL \\|\\| \"https://api.github.com\", fetchImpl = globalThis.fetch, retryDelaysMs = DEFAULT_RETRY_DELAYS_MS, } = {}) | { token, apiUrl = process.env.GITHUB_API_URL \\|\\| \"https://api.github.com\", fetchImpl = globalThis.fetch, retryDelaysMs = DEFAULT_RETRY_DELAYS_MS, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGitHubIssueRequest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:393` |\n| `createGithubRulesetBypassRolloutPlan` | function: function createGithubRulesetBypassRolloutPlan({ repository, rulesetId, inventory, rollbackSnapshot, } = {}) | { repository, rulesetId, inventory, rollbackSnapshot, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGithubRulesetBypassRolloutPlan } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:1110` |\n| `createGithubRulesetGovernanceRolloutPlan` | function: function createGithubRulesetGovernanceRolloutPlan({ repository, targetRef, rulesetId, rulesetName, inventory, rollbackSnapshot, desiredProtection, } = {}) | { repository, targetRef, rulesetId, rulesetName, inventory, rollbackSnapshot, desiredProtection, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGithubRulesetGovernanceRolloutPlan } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:1189` |\n| `createKfd1ReleaseGateEvidence` | function: function createKfd1ReleaseGateEvidence({ cwd = process.cwd(), artifactRoot = \"\", artifacts = [], witnesses = [], verifiedAt = new Date().toISOString(), metadata = resolveKfd1Metadata(), } = {}) | { cwd = process.cwd(), artifactRoot = \"\", artifacts = [], witnesses = [], verifiedAt = new Date().toISOString(), metadata = resolveKfd1Metadata(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfd1ReleaseGateEvidence } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:977` |\n| `createKfd3CollaborationInterfaceReleaseGateEvidence` | function: function createKfd3CollaborationInterfaceReleaseGateEvidence({ prebuildWitnesses = [], artifactWitnesses = [], prebuildWitnessMetas = [], artifactWitnessMetas = [], artifactCommandMeta = undefined, verifiedAt = new Date().toISOString(), metadata = resolveKfd3Metadata(), } = {}) | { prebuildWitnesses = [], artifactWitnesses = [], prebuildWitnessMetas = [], artifactWitnessMetas = [], artifactCommandMeta = undefined, verifiedAt = new Date().toISOString(), metadata = resolveKfd3Metadata(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfd3CollaborationInterfaceReleaseGateEvidence } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:1132` |\n| `createKfd3SurfaceWitness` | function: function createKfd3SurfaceWitness({ cwd = process.cwd(), registryPath = \"\", kind = \"prebuild\", sourceSha = \"\", artifactPath = \"\", } = {}) | { cwd = process.cwd(), registryPath = \"\", kind = \"prebuild\", sourceSha = \"\", artifactPath = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | network | `import { createKfd3SurfaceWitness } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd3-surface-register.js:702` |\n| `createKfdBadgeSpecsFromStandards` | function: function createKfdBadgeSpecsFromStandards(standardsMetadata) | standardsMetadata | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfdBadgeSpecsFromStandards } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:126` |\n| `createKfdSupportProjection` | function: function createKfdSupportProjection({ matrix, matrixRoot = \"\", gateResults = [], authorityPath = \".buildchain/kfd/support-matrix.json\", expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {}) | { matrix, matrixRoot = \"\", gateResults = [], authorityPath = \".buildchain/kfd/support-matrix.json\", expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfdSupportProjection } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:716` |\n| `createKungfuBuildInfoProjection` | function: function createKungfuBuildInfoProjection({ moduleFact, cwd = process.cwd(), now = nowIso() } = {}) | { moduleFact, cwd = process.cwd(), now = nowIso() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKungfuBuildInfoProjection } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:520` |\n| `createManualUpstreamPickupCapture` | function: function createManualUpstreamPickupCapture({ plan, expectedDownstreamBaseSha, }) | { plan, expectedDownstreamBaseSha, } | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createManualUpstreamPickupCapture } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-pickup.js:361` |\n| `createManualUpstreamPickupPlan` | function: function createManualUpstreamPickupPlan({ config: configInput, sourceId, channel, currentVersion, upstreamRelease, }) | { config: configInput, sourceId, channel, currentVersion, upstreamRelease, } | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createManualUpstreamPickupPlan } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-pickup.js:303` |\n| `createPackageReleasePropagationCapture` | function: function createPackageReleasePropagationCapture({ config: configInput, upstreamRelease: upstreamReleaseInput, expectedBaseShas = {}, } = {}) | { config: configInput, upstreamRelease: upstreamReleaseInput, expectedBaseShas = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPackageReleasePropagationCapture } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-capture.js:101` |\n| `createPaperAlphaPlan` | function: function createPaperAlphaPlan({ cwd = process.cwd(), sourceRef = \"\", targetRef = \"\", } = {}) | { cwd = process.cwd(), sourceRef = \"\", targetRef = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPaperAlphaPlan } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:2655` |\n| `createPaperBuildPlan` | function: function createPaperBuildPlan({ cwd = process.cwd(), sourceSha = \"\", pullToolchain = true, } = {}) | { cwd = process.cwd(), sourceSha = \"\", pullToolchain = true, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPaperBuildPlan } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:2592` |\n| `createPaperResumePlan` | function: function createPaperResumePlan({ cwd = process.cwd(), buildchainRef = \"\", } = {}) | { cwd = process.cwd(), buildchainRef = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { createPaperResumePlan } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:2713` |\n| `createPaperWorkStartPlan` | function: function createPaperWorkStartPlan({ cwd = process.cwd(), topic = \"\", branch = \"\", buildchainSha = \"\", } = {}) | { cwd = process.cwd(), topic = \"\", branch = \"\", buildchainSha = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPaperWorkStartPlan } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-work.js:41` |\n| `createPaperWorkSubmitPlan` | function: function createPaperWorkSubmitPlan({ cwd = process.cwd(), pullRequests = [], pullRequestObservation = { ok: true }, buildchainSha = \"\", } = {}) | { cwd = process.cwd(), pullRequests = [], pullRequestObservation = { ok: true }, buildchainSha = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPaperWorkSubmitPlan } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-work.js:207` |\n| `createPortableDevCachePlan` | function: function createPortableDevCachePlan(manifest) | manifest | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPortableDevCachePlan } from \"@kungfu-tech/buildchain/core\";` | `packages/core/portable-dev-cache.js:172` |\n| `createPortableDevCacheReceipt` | function: function createPortableDevCacheReceipt({ plan, matchedKey = \"\", cacheHit = \"\", validationStatus = \"pass\", validationReason = \"\", coldFallbackStatus = \"not-run\", }) | { plan, matchedKey = \"\", cacheHit = \"\", validationStatus = \"pass\", validationReason = \"\", coldFallbackStatus = \"not-run\", } | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPortableDevCacheReceipt } from \"@kungfu-tech/buildchain/core\";` | `packages/core/portable-dev-cache.js:226` |\n| `createPublicationAdmission` | function: function createPublicationAdmission(input = {}) | input = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPublicationAdmission } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:236` |\n| `createPublicationArtifactCandidate` | function: function createPublicationArtifactCandidate({ repository, sourceSha, sourceTreeSha, runtimeSha, manifest, passport, controllerReceipt, files = [], } = {}) | { repository, sourceSha, sourceTreeSha, runtimeSha, manifest, passport, controllerReceipt, files = [], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationArtifactCandidate } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-artifact-candidate.js:55` |\n| `createPublicationArtifactManifestSet` | function: function createPublicationArtifactManifestSet({ repository, sourceSha, sourceTreeSha, manifests = [], payloads = [], } = {}) | { repository, sourceSha, sourceTreeSha, manifests = [], payloads = [], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationArtifactManifestSet } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:303` |\n| `createPublicationAuthorityRegistry` | function: function createPublicationAuthorityRegistry({ descriptors = [], workflows = [] } = {}) | { descriptors = [], workflows = [] } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationAuthorityRegistry } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:121` |\n| `createPublicationControlPlaneAudit` | function: function createPublicationControlPlaneAudit({ repository, workflowPath, publisherWorkflowPath, environment, facts = [], observedAt, expiresAt, } = {}) | { repository, workflowPath, publisherWorkflowPath, environment, facts = [], observedAt, expiresAt, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPublicationControlPlaneAudit } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:208` |\n| `createPublicationGateDecision` | function: function createPublicationGateDecision({ sourceSha, profile, required = false, rationale, policy = {}, } = {}) | { sourceSha, profile, required = false, rationale, policy = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPublicationGateDecision } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:280` |\n| `createPublicationQualificationReceipt` | function: function createPublicationQualificationReceipt({ capability, gateAggregate, consumerDecision, now = new Date(), } = {}) | { capability, gateAggregate, consumerDecision, now = new Date(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationQualificationReceipt } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:1035` |\n| `createPublicationSealedBundle` | function: function createPublicationSealedBundle({ candidate, packageName, packageVersion, npmTarballPath, npmIntegrity, releaseAssetPaths = [], githubReleaseRequired = true, } = {}) | { candidate, packageName, packageVersion, npmTarballPath, npmIntegrity, releaseAssetPaths = [], githubReleaseRequired = true, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationSealedBundle } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-sealed-bundle.js:75` |\n| `createPublicationSourceBundle` | function: function createPublicationSourceBundle({ cwd = process.cwd(), sourcePaths = [], output = \".buildchain/publication/source.tar.gz\", } = {}) | { cwd = process.cwd(), sourcePaths = [], output = \".buildchain/publication/source.tar.gz\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write, subprocess | `import { createPublicationSourceBundle } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-artifact.js:249` |\n| `createReadmeBadgeEndpointRegistry` | function: function createReadmeBadgeEndpointRegistry({ kfdSpecs = undefined, kfdStandards = undefined } = {}) | { kfdSpecs = undefined, kfdStandards = undefined } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { createReadmeBadgeEndpointRegistry } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:133` |\n| `createReleaseActivationReceiptSet` | function: function createReleaseActivationReceiptSet({ transaction, receipts = [], } = {}) | { transaction, receipts = [], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleaseActivationReceiptSet } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-activation-transaction.js:311` |\n| `createReleaseActivationTransaction` | function: function createReleaseActivationTransaction({ transactionId, mode = \"shadow\", bindings, owners, } = {}) | { transactionId, mode = \"shadow\", bindings, owners, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleaseActivationTransaction } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-activation-transaction.js:103` |\n| `createReleaseCandidatePassport` | function: function createReleaseCandidatePassport({ repository = \"\", pullRequest = {}, targetChannel = \"\", version = \"\", sourceHeadSha = \"\", baseSha = \"\", mergeRefSha = \"\", sourceTreeHash = \"\", buildSummary = {}, buildchain = {}, gateAggregate = undefined, familyEvidence = undefined, controllerReceipts = [], controllerReceiptReferences = [], workflow = {}, createdAt = nowIso(), } = {}) | { repository = \"\", pullRequest = {}, targetChannel = \"\", version = \"\", sourceHeadSha = \"\", baseSha = \"\", mergeRefSha = \"\", sourceTreeHash = \"\", buildSummary = {}, buildchain = {}, gateAggregate = undefined, familyEvidence = undefined, controllerReceipts = [], controllerReceiptReferences = [], workflow = {}, createdAt = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleaseCandidatePassport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-candidate.js:310` |\n| `createReleaseCheckReport` | function: function createReleaseCheckReport({ passport, artifactEvidence, publishEvidence, impact, agentIndex, productMechanism, kfdAgentHubEvidence, kfdSupportEvidence, releaseEvidenceDocuments = [], checkedAt = nowIso(), } = {}) | { passport, artifactEvidence, publishEvidence, impact, agentIndex, productMechanism, kfdAgentHubEvidence, kfdSupportEvidence, releaseEvidenceDocuments = [], checkedAt = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleaseCheckReport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:2628` |\n| `createReleasePassport` | function: function createReleasePassport({ cwd = process.cwd(), repository = \"\", tag = \"\", sourceSha = \"\", line = \"\", productName = \"Buildchain\", packageName = \"@kungfu-tech/buildchain\", packageVersion = \"\", productMechanismPath = \"product-mechanism.json\", artifactEvidencePath = \"artifact-evidence.json\", impactPath = \"impact.json\", agentIndexPath = \"agent-index.json\", checkReportPath = \"check-report.json\", publishEvidencePath = \"\", transactionStatePath = \"\", assets = [], packageSet = undefined, anchorManifest = undefined, versionMaterial = undefined, publishEvidence = undefined, trustedPublishing = undefined, transaction = undefined, buildSummary = undefined, buildFacts = [], platformArtifactManifests = [], distTagPromotionEvidence = undefined, release = {}, publish = {}, impact = undefined, workflow = {}, kfd1 = undefined, kfd2Claims = [], kfd3 = undefined, kfdSupport = undefined, kfdSupportEvidencePath = \"\", invariantPassports = undefined, releaseEvidence = [], kfdAgentHubEvidence = undefined, kfdAgentHubEvidencePath = \"\", controllerReceipts = [], controllerReceiptReferences = [], githubArtifactAttestations = [], checkedAt = \"\", } = {}) | { cwd = process.cwd(), repository = \"\", tag = \"\", sourceSha = \"\", line = \"\", productName = \"Buildchain\", packageName = \"@kungfu-tech/buildchain\", packageVersion = \"\", productMechanismPath = \"product-mechanism.json\", artifactEvidencePath = \"artifact-evidence.json\", impactPath = \"impact.json\", agentIndexPath = \"agent-index.json\", checkReportPath = \"check-report.json\", publishEvidencePath = \"\", transactionStatePath = \"\", assets = [], packageSet = undefined, anchorManifest = undefined, versionMaterial = undefined, publishEvidence = undefined, trustedPublishing = undefined, transaction = undefined, buildSummary = undefined, buildFacts = [], platformArtifactManifests = [], distTagPromotionEvidence = undefined, release = {}, publish = {}, impact = undefined, workflow = {}, kfd1 = undefined, kfd2Claims = [], kfd3 = undefined, kfdSupport = undefined, kfdSupportEvidencePath = \"\", invariantPassports = undefined, releaseEvidence = [], kfdAgentHubEvidence = undefined, kfdAgentHubEvidencePath = \"\", controllerReceipts = [], controllerReceiptReferences = [], githubArtifactAttestations = [], checkedAt = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleasePassport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:1214` |\n| `createReleasePassportCheckManifest` | function: function createReleasePassportCheckManifest({ standards = kfdStandards } = {}) | { standards = kfdStandards } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleasePassportCheckManifest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport-contract.js:147` |\n| `createReleasePropagationLock` | function: function createReleasePropagationLock({ graph, edge, sourceNode, targetNode, upstreamRelease, downstreamChannel, } = {}) | { graph, edge, sourceNode, targetNode, upstreamRelease, downstreamChannel, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleasePropagationLock } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation.js:199` |\n| `createReleasePropagationReceipt` | function: function createReleasePropagationReceipt({ plan, target = \"\", lockResult, prOutcome, stagingState = \"pending\", productionState = \"not-requested\", observedAt = \"\", } = {}) | { plan, target = \"\", lockResult, prOutcome, stagingState = \"pending\", productionState = \"not-requested\", observedAt = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleasePropagationReceipt } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation.js:371` |\n| `createReleasePropagationStageReceipt` | function: function createReleasePropagationStageReceipt({ work, stage, outcome = \"success\", observedAt, actor, summary, evidence, failure = null, } = {}) | { work, stage, outcome = \"success\", observedAt, actor, summary, evidence, failure = null, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleasePropagationStageReceipt } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-work.js:214` |\n| `createReleasePropagationWork` | function: function createReleasePropagationWork({ plan, target = \"\", workContext, expectedDownstreamBaseSha, } = {}) | { plan, target = \"\", workContext, expectedDownstreamBaseSha, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleasePropagationWork } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-work.js:111` |\n| `createReleaseTransaction` | function: function createReleaseTransaction({ repository, version, exactTag = \"\", channel, line = \"\", sourceSha, targetRef, releaseSha, releaseMaterialSha = releaseSha, publishToolingSha = \"\", lifecycleIdentity = \"lifecycle.publish\", statePath = \"\", evidencePath = \"\", actor = \"\", runId = \"\", } = {}) | { repository, version, exactTag = \"\", channel, line = \"\", sourceSha, targetRef, releaseSha, releaseMaterialSha = releaseSha, publishToolingSha = \"\", lifecycleIdentity = \"lifecycle.publish\", statePath = \"\", evidencePath = \"\", actor = \"\", runId = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleaseTransaction } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publish-transaction.js:197` |\n| `createRunnerProvenance` | function: function createRunnerProvenance({ runnerClass, os, architecture, imageDigest, measurementDigest, baselineDigest = \"\", toolchainDigest = \"\", cacheContractDigest = \"\", taskIsolationDigest = \"\", cleanBaselineProven = false, isolation = \"\", } = {}) | { runnerClass, os, architecture, imageDigest, measurementDigest, baselineDigest = \"\", toolchainDigest = \"\", cacheContractDigest = \"\", taskIsolationDigest = \"\", cleanBaselineProven = false, isolation = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createRunnerProvenance } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:166` |\n| `createStableCandidateLedger` | function: function createStableCandidateLedger({ repository, targetBranch, now = new Date().toISOString() } = {}) | { repository, targetBranch, now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createStableCandidateLedger } from \"@kungfu-tech/buildchain/core\";` | `packages/core/stable-candidate-ledger.js:56` |\n| `createSurfaceTimestampPolicy` | function: function createSurfaceTimestampPolicy({ generatedAt = \"\", publishedAt = \"\", sourceDateEpoch = process.env.SOURCE_DATE_EPOCH \\|\\| DEFAULT_SOURCE_DATE_EPOCH, sourceRevision = \"\", deterministicInputs = [], timestampPolicy = \"\", timestampFields = [\"generatedAt\", \"publishedAt\"], timestampFieldsParticipateInArtifactDigest = true, artifactDigestScope = \"manifest-and-artifact\", reproducible = true, } = {}) | { generatedAt = \"\", publishedAt = \"\", sourceDateEpoch = process.env.SOURCE_DATE_EPOCH \\|\\| DEFAULT_SOURCE_DATE_EPOCH, sourceRevision = \"\", deterministicInputs = [], timestampPolicy = \"\", timestampFields = [\"generatedAt\", \"publishedAt\"], timestampFieldsParticipateInArtifactDigest = true, artifactDigestScope = \"manifest-and-artifact\", reproducible = true, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createSurfaceTimestampPolicy } from \"@kungfu-tech/buildchain/core\";` | `packages/core/surface-manifest.js:34` |\n| `createWebSurfaceProductionDecision` | function: function createWebSurfaceProductionDecision({ approved, kind, repository, sourceSha, actor, actorPermission = \"\", releasePr = 0, releaseSource = \"\", reason, } = {}) | { approved, kind, repository, sourceSha, actor, actorPermission = \"\", releasePr = 0, releaseSource = \"\", reason, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createWebSurfaceProductionDecision } from \"@kungfu-tech/buildchain/core\";` | `packages/core/web-surface-publication-candidate.js:45` |\n| `createWebSurfacePublicationCandidate` | function: function createWebSurfacePublicationCandidate({ repository, sourceSha, sourceTreeSha, runtimeSha, plan, planFileDigest, controllerReceipt, decision, } = {}) | { repository, sourceSha, sourceTreeSha, runtimeSha, plan, planFileDigest, controllerReceipt, decision, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createWebSurfacePublicationCandidate } from \"@kungfu-tech/buildchain/core\";` | `packages/core/web-surface-publication-candidate.js:79` |\n| `decideChannelCandidate` | function: function decideChannelCandidate(input) | input | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { decideChannelCandidate } from \"@kungfu-tech/buildchain/core\";` | `packages/core/channel-candidate.js:90` |\n| `DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY` | constant: const DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY | none | value | Import does not declare a throw contract. | none-on-import | `import { DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:6` |\n| `defaultBuildchainLogPath` | function: function defaultBuildchainLogPath({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { defaultBuildchainLogPath } from \"@kungfu-tech/buildchain/core\";` | `packages/core/logging.js:41` |\n| `defaultPublishEvidencePath` | function: function defaultPublishEvidencePath(version, workspace = process.cwd()) | version, workspace = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { defaultPublishEvidencePath } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publish-transaction.js:193` |\n| `defaultReleaseStatePath` | function: function defaultReleaseStatePath(version, workspace = process.cwd()) | version, workspace = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { defaultReleaseStatePath } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publish-transaction.js:185` |\n| `DETACHED_ARTIFACT_SIGNATURE_CONTRACT` | constant: const DETACHED_ARTIFACT_SIGNATURE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { DETACHED_ARTIFACT_SIGNATURE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/detached-artifact-signature.js:10` |\n| `detectKfd3Surfaces` | function: function detectKfd3Surfaces({ cwd = process.cwd(), kinds = [], artifactPath = \"\" } = {}) | { cwd = process.cwd(), kinds = [], artifactPath = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { detectKfd3Surfaces } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd3-surface-register.js:423` |\n| `detectLockfile` | function: function detectLockfile(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { detectLockfile } from \"@kungfu-tech/buildchain/core\";` | `packages/core/package-manager.js:237` |\n| `detectPackageManager` | function: function detectPackageManager(cwd = process.cwd()) | cwd = process.cwd() | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { detectPackageManager } from \"@kungfu-tech/buildchain/core\";` | `packages/core/package-manager.js:56` |\n| `detectPublicationAuthoritySignals` | function: function detectPublicationAuthoritySignals(workflowText = \"\") | workflowText = \"\" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { detectPublicationAuthoritySignals } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:104` |\n| `detectRequestedParallelism` | function: function detectRequestedParallelism({ command = \"\", args = [], env = process.env, } = {}) | { command = \"\", args = [], env = process.env, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { detectRequestedParallelism } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:1188` |\n| `detectRequestedParallelismFromProcessSamples` | function: function detectRequestedParallelismFromProcessSamples(samples = []) | samples = [] | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { detectRequestedParallelismFromProcessSamples } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:1223` |\n| `discoverArtifactPassport` | function: async function discoverArtifactPassport({ subject, cwd = process.cwd(), passportLocation = \"\", locatorConfig = \"\", repository = \"\", tag = \"\", githubReleaseBaseUrl = \"\", } = {}) | { subject, cwd = process.cwd(), passportLocation = \"\", locatorConfig = \"\", repository = \"\", tag = \"\", githubReleaseBaseUrl = \"\", } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { discoverArtifactPassport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-passport.js:499` |\n| `discoverBuildchainRepoFiles` | function: function discoverBuildchainRepoFiles(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { discoverBuildchainRepoFiles } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:143` |\n| `discoverConfiguredDerivedVersionMaterial` | function: function discoverConfiguredDerivedVersionMaterial(cwd = process.cwd(), loadedConfig = loadBuildchainConfig(cwd)) | cwd = process.cwd(), loadedConfig = loadBuildchainConfig(cwd) | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { discoverConfiguredDerivedVersionMaterial } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:1467` |\n| `discoverConfiguredVersionStateFiles` | function: function discoverConfiguredVersionStateFiles(cwd = process.cwd(), loadedConfig = loadBuildchainConfig(cwd)) | cwd = process.cwd(), loadedConfig = loadBuildchainConfig(cwd) | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { discoverConfiguredVersionStateFiles } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:1428` |\n| `discoverKfdStandards` | function: function discoverKfdStandards() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { discoverKfdStandards } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd.js:464` |\n| `discoverPaperFleet` | function: function discoverPaperFleet(root = process.cwd()) | root = process.cwd() | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { discoverPaperFleet } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-fleet.js:23` |\n| `enumerateActionInputs` | function: function enumerateActionInputs({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateActionInputs } from \"@kungfu-tech/buildchain/core\";` | `packages/core/public-surface-audit.js:91` |\n| `enumerateCliCommandsFromBin` | function: function enumerateCliCommandsFromBin({ root = process.cwd(), binPath = \"bin/buildchain.mjs\", } = {}) | { root = process.cwd(), binPath = \"bin/buildchain.mjs\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateCliCommandsFromBin } from \"@kungfu-tech/buildchain/core\";` | `packages/core/public-surface-cli.js:93` |\n| `enumerateDocCommandRefs` | function: function enumerateDocCommandRefs({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateDocCommandRefs } from \"@kungfu-tech/buildchain/core\";` | `packages/core/public-surface-audit.js:115` |\n| `enumerateSitePages` | function: function enumerateSitePages({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateSitePages } from \"@kungfu-tech/buildchain/core\";` | `packages/core/public-surface-audit.js:106` |\n| `enumerateWorkflowInputs` | function: function enumerateWorkflowInputs({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateWorkflowInputs } from \"@kungfu-tech/buildchain/core\";` | `packages/core/public-surface-audit.js:74` |\n| `evaluateBuildchainContractLock` | function: function evaluateBuildchainContractLock({ lock, current, runtimeRef = \"\", runtimeSha = \"\", runtimeClass = \"\", compatibilityPolicy = \"\", } = {}) | { lock, current, runtimeRef = \"\", runtimeSha = \"\", runtimeClass = \"\", compatibilityPolicy = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { evaluateBuildchainContractLock } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-contract.js:853` |\n| `evaluateCodeownersAuthority` | function: function evaluateCodeownersAuthority({ source = \"\", sourcePath = \"\", reviewAuthority = \"kungfu-origin\", protectedPaths = PROTECTED_AUTHORITY_PATHS, } = {}) | { source = \"\", sourcePath = \"\", reviewAuthority = \"kungfu-origin\", protectedPaths = PROTECTED_AUTHORITY_PATHS, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluateCodeownersAuthority } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:425` |\n| `evaluateGithubGovernanceSnapshot` | function: function evaluateGithubGovernanceSnapshot({ descriptor = createBuildchainGithubGovernanceAuthority(), repository, targetRef, organizationPlan, codeowners, effectivePolicy, memberships, apiEvidence = {}, observedAt, expiresAt, verifier = {}, } = {}) | { descriptor = createBuildchainGithubGovernanceAuthority(), repository, targetRef, organizationPlan, codeowners, effectivePolicy, memberships, apiEvidence = {}, observedAt, expiresAt, verifier = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { evaluateGithubGovernanceSnapshot } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:694` |\n| `evaluateKfdProductGate` | function: async function evaluateKfdProductGate({ cwd = process.cwd(), input, expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {}) | { cwd = process.cwd(), input, expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluateKfdProductGate } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:465` |\n| `evaluatePublicationControlPlaneSnapshot` | function: function evaluatePublicationControlPlaneSnapshot({ repository, workflowPath, publisherWorkflowPath = workflowPath, environment, branch, packageName, publisherMode = \"npm-trusted-publisher\", requiredStatusCheck = \"check\", snapshot, observedAt, expiresAt, } = {}) | { repository, workflowPath, publisherWorkflowPath = workflowPath, environment, branch, packageName, publisherMode = \"npm-trusted-publisher\", requiredStatusCheck = \"check\", snapshot, observedAt, expiresAt, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluatePublicationControlPlaneSnapshot } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-control-plane-audit.js:75` |\n| `executePaperNpmBootstrap` | function: function executePaperNpmBootstrap(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { executePaperNpmBootstrap } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:2840` |\n| `executePaperWorkStart` | function: function executePaperWorkStart(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { executePaperWorkStart } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-work.js:169` |\n| `executePaperWorkSubmitPush` | function: function executePaperWorkSubmitPush(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { executePaperWorkSubmitPush } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-work.js:357` |\n| `explainArtifactPassport` | function: async function explainArtifactPassport(options = {}) | options = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { explainArtifactPassport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-passport.js:827` |\n| `explainKfdAgentHub` | function: function explainKfdAgentHub({ cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = \"\" } = {}) | { cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { explainKfdAgentHub } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-agent-hub.js:470` |\n| `explainReleaseLineDryRun` | function: function explainReleaseLineDryRun({ cwd = process.cwd(), targetRef, sha = \"\", sourceRef = \"\", tags, publishTransaction = false, publishCommand = \"\", } = {}) | { cwd = process.cwd(), targetRef, sha = \"\", sourceRef = \"\", tags, publishTransaction = false, publishCommand = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { explainReleaseLineDryRun } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-line-dry-run.js:127` |\n| `explainReleasePassport` | function: async function explainReleasePassport({ passportLocation, forAudience = \"human\" } = {}) | { passportLocation, forAudience = \"human\" } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { explainReleasePassport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:2812` |\n| `FAMILY_RELEASE_EVIDENCE_CONTRACT` | constant: const FAMILY_RELEASE_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { FAMILY_RELEASE_EVIDENCE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-candidate.js:5` |\n| `finalizeBuildchainContractWorld` | function: function finalizeBuildchainContractWorld(contractWorld) | contractWorld | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { finalizeBuildchainContractWorld } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-contract.js:762` |\n| `formatCandidateTimelineReport` | function: function formatCandidateTimelineReport(timeline) | timeline | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { formatCandidateTimelineReport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/candidate-timeline.js:438` |\n| `formatDiagnosticsSummaryTable` | function: function formatDiagnosticsSummaryTable(summary = {}) | summary = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { formatDiagnosticsSummaryTable } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:1786` |\n| `formatReleaseLineDryRun` | function: function formatReleaseLineDryRun(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { formatReleaseLineDryRun } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-line-dry-run.js:267` |\n| `getLifecycleStage` | function: function getLifecycleStage(loadedConfig, name) | loadedConfig, name | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { getLifecycleStage } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:1372` |\n| `getNativeDiagnosticsProfile` | function: function getNativeDiagnosticsProfile(loadedConfig) | loadedConfig | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { getNativeDiagnosticsProfile } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:520` |\n| `getPublishContract` | function: function getPublishContract(loadedConfig) | loadedConfig | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { getPublishContract } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:1376` |\n| `getStableReleasePolicy` | function: function getStableReleasePolicy(loadedConfig) | loadedConfig | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { getStableReleasePolicy } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:328` |\n| `getVersionStrategy` | function: function getVersionStrategy(loadedConfig) | loadedConfig | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { getVersionStrategy } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:1500` |\n| `getWorkspaceInfo` | function: function getWorkspaceInfo(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { getWorkspaceInfo } from \"@kungfu-tech/buildchain/core\";` | `packages/core/package-manager.js:211` |\n| `GITHUB_ARTIFACT_ATTESTATION_EVIDENCE_CONTRACT` | constant: const GITHUB_ARTIFACT_ATTESTATION_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_EVIDENCE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:9` |\n| `GITHUB_ARTIFACT_ATTESTATION_POLICY_CONTRACT` | constant: const GITHUB_ARTIFACT_ATTESTATION_POLICY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_POLICY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:5` |\n| `GITHUB_ARTIFACT_ATTESTATION_PREDICATE_CONTRACT` | constant: const GITHUB_ARTIFACT_ATTESTATION_PREDICATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_PREDICATE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:7` |\n| `GITHUB_ARTIFACT_ATTESTATION_PREDICATE_TYPE` | constant: const GITHUB_ARTIFACT_ATTESTATION_PREDICATE_TYPE | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_PREDICATE_TYPE } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:13` |\n| `GITHUB_ARTIFACT_ATTESTATION_VERIFICATION_CONTRACT` | constant: const GITHUB_ARTIFACT_ATTESTATION_VERIFICATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_VERIFICATION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:11` |\n| `GITHUB_ARTIFACT_ATTESTATION_WORKFLOW` | constant: const GITHUB_ARTIFACT_ATTESTATION_WORKFLOW | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_WORKFLOW } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:15` |\n| `GITHUB_GOVERNANCE_AUTHORITY_CONTRACT` | constant: const GITHUB_GOVERNANCE_AUTHORITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_GOVERNANCE_AUTHORITY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:3` |\n| `GITHUB_GOVERNANCE_RECEIPT_CONTRACT` | constant: const GITHUB_GOVERNANCE_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_GOVERNANCE_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:5` |\n| `GITHUB_GOVERNANCE_ROLLOUT_CONTRACT` | constant: const GITHUB_GOVERNANCE_ROLLOUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_GOVERNANCE_ROLLOUT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:7` |\n| `GITHUB_GOVERNANCE_RULESET_ROLLOUT_CONTRACT` | constant: const GITHUB_GOVERNANCE_RULESET_ROLLOUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_GOVERNANCE_RULESET_ROLLOUT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:9` |\n| `githubArtifactAttestationRequiredPermissions` | function: function githubArtifactAttestationRequiredPermissions() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { githubArtifactAttestationRequiredPermissions } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:640` |\n| `githubArtifactAttestationSemanticRoot` | function: function githubArtifactAttestationSemanticRoot(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { githubArtifactAttestationSemanticRoot } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:91` |\n| `githubArtifactAttestationSha256Buffer` | function: function githubArtifactAttestationSha256Buffer(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { githubArtifactAttestationSha256Buffer } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:83` |\n| `githubArtifactAttestationSha256File` | function: function githubArtifactAttestationSha256File(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { githubArtifactAttestationSha256File } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:87` |\n| `githubGovernanceDigest` | function: function githubGovernanceDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { githubGovernanceDigest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:163` |\n| `GitHubIssueRequestError` | class: class GitHubIssueRequestError | none | GitHubIssueRequestError | Construction and method errors follow the linked source implementation. | class-dependent | `import { GitHubIssueRequestError } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:23` |\n| `HOMEBREW_TAP_CHECK_CONTRACT` | constant: const HOMEBREW_TAP_CHECK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { HOMEBREW_TAP_CHECK_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/homebrew.js:6` |\n| `HOMEBREW_TAP_FACTS_CONTRACT` | constant: const HOMEBREW_TAP_FACTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { HOMEBREW_TAP_FACTS_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/homebrew.js:5` |\n| `HOMEBREW_TAP_MANIFEST_CONTRACT` | constant: const HOMEBREW_TAP_MANIFEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { HOMEBREW_TAP_MANIFEST_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/homebrew.js:7` |\n| `IMPACT_LEDGER_CONTRACT` | constant: const IMPACT_LEDGER_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { IMPACT_LEDGER_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:30` |\n| `initKfdAgentHub` | function: function initKfdAgentHub({ cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, write = false, force = false } = {}) | { cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, write = false, force = false } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { initKfdAgentHub } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-agent-hub.js:363` |\n| `inspectKfdAgentHub` | function: function inspectKfdAgentHub({ cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = \"\" } = {}) | { cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { inspectKfdAgentHub } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-agent-hub.js:384` |\n| `KFD_AGENT_HUB_ADOPTION_CONTRACT` | constant: const KFD_AGENT_HUB_ADOPTION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_ADOPTION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-agent-hub.js:9` |\n| `KFD_AGENT_HUB_ADOPTION_SCHEMA` | constant: const KFD_AGENT_HUB_ADOPTION_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_ADOPTION_SCHEMA } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-agent-hub.js:12` |\n| `KFD_AGENT_HUB_DECLARATION` | constant: const KFD_AGENT_HUB_DECLARATION | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_DECLARATION } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-agent-hub.js:7` |\n| `KFD_AGENT_HUB_LOCK_CONTRACT` | constant: const KFD_AGENT_HUB_LOCK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_LOCK_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-agent-hub.js:10` |\n| `KFD_AGENT_HUB_OUTPUT_DIR` | constant: const KFD_AGENT_HUB_OUTPUT_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_OUTPUT_DIR } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-agent-hub.js:8` |\n| `KFD_AGENT_HUB_VERIFICATION_CONTRACT` | constant: const KFD_AGENT_HUB_VERIFICATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_VERIFICATION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-agent-hub.js:11` |\n| `KFD_PRODUCT_GATE_CONTRACT` | constant: const KFD_PRODUCT_GATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_PRODUCT_GATE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:11` |\n| `KFD_PRODUCT_GATE_INPUT_CONTRACT` | constant: const KFD_PRODUCT_GATE_INPUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_PRODUCT_GATE_INPUT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:9` |\n| `KFD_PRODUCT_GATE_INPUT_SCHEMA` | constant: const KFD_PRODUCT_GATE_INPUT_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_PRODUCT_GATE_INPUT_SCHEMA } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:55` |\n| `KFD_PRODUCT_GATE_INPUT_SCHEMA_ID` | constant: const KFD_PRODUCT_GATE_INPUT_SCHEMA_ID | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_PRODUCT_GATE_INPUT_SCHEMA_ID } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:15` |\n| `KFD_SUPPORT_PROJECTION_CONTRACT` | constant: const KFD_SUPPORT_PROJECTION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_SUPPORT_PROJECTION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:13` |\n| `KFD_SUPPORT_PROJECTION_SCHEMA` | constant: const KFD_SUPPORT_PROJECTION_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_SUPPORT_PROJECTION_SCHEMA } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:130` |\n| `KFD_SUPPORT_PROJECTION_SCHEMA_ID` | constant: const KFD_SUPPORT_PROJECTION_SCHEMA_ID | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_SUPPORT_PROJECTION_SCHEMA_ID } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:17` |\n| `kfd1` | constant: const kfd1 | none | value | Import does not declare a throw contract. | none-on-import | `import { kfd1 } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd.js:546` |\n| `KFD1_RELEASE_GATE_CONTRACT` | constant: const KFD1_RELEASE_GATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD1_RELEASE_GATE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:9` |\n| `KFD1_WITNESS_SET_CONTRACT` | constant: const KFD1_WITNESS_SET_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD1_WITNESS_SET_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:10` |\n| `kfd2` | constant: const kfd2 | none | value | Import does not declare a throw contract. | none-on-import | `import { kfd2 } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd.js:561` |\n| `KFD2_PRODUCT_CLAIMS_OUTPUT_CONTRACT` | constant: const KFD2_PRODUCT_CLAIMS_OUTPUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_PRODUCT_CLAIMS_OUTPUT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd2-product-claims.js:23` |\n| `KFD2_PRODUCT_CLAIMS_REGISTRY_CONTRACT` | constant: const KFD2_PRODUCT_CLAIMS_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_PRODUCT_CLAIMS_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd2-product-claims.js:19` |\n| `KFD2_PRODUCT_CLAIMS_VALIDATION_CONTRACT` | constant: const KFD2_PRODUCT_CLAIMS_VALIDATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_PRODUCT_CLAIMS_VALIDATION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd2-product-claims.js:21` |\n| `KFD2_RELEASE_TRUST_PASSPORT_CONTRACT` | constant: const KFD2_RELEASE_TRUST_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_RELEASE_TRUST_PASSPORT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:35` |\n| `KFD2_TRUST_PROOF_CONTRACT` | constant: const KFD2_TRUST_PROOF_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_TRUST_PROOF_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:36` |\n| `kfd3` | constant: const kfd3 | none | value | Import does not declare a throw contract. | none-on-import | `import { kfd3 } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd.js:663` |\n| `KFD3_ARTIFACT_WITNESS_CONTRACT` | constant: const KFD3_ARTIFACT_WITNESS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_ARTIFACT_WITNESS_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:13` |\n| `KFD3_CAPABILITY_QUERY_CONTRACT` | constant: const KFD3_CAPABILITY_QUERY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_CAPABILITY_QUERY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd3-surface-register.js:9` |\n| `KFD3_DEFAULT_REGISTRY_PATH` | constant: const KFD3_DEFAULT_REGISTRY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_DEFAULT_REGISTRY_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd3-surface-register.js:10` |\n| `KFD3_PREBUILD_WITNESS_CONTRACT` | constant: const KFD3_PREBUILD_WITNESS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_PREBUILD_WITNESS_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:12` |\n| `KFD3_RELEASE_GATE_CONTRACT` | constant: const KFD3_RELEASE_GATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_RELEASE_GATE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:11` |\n| `KFD3_SURFACE_AUDIT_CONTRACT` | constant: const KFD3_SURFACE_AUDIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_SURFACE_AUDIT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd3-surface-register.js:8` |\n| `KFD3_SURFACE_DETECTION_CONTRACT` | constant: const KFD3_SURFACE_DETECTION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_SURFACE_DETECTION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd3-surface-register.js:7` |\n| `KFD3_SURFACE_REGISTRY_CONTRACT` | constant: const KFD3_SURFACE_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_SURFACE_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd3-surface-register.js:6` |\n| `kfd4` | constant: const kfd4 | none | value | Import does not declare a throw contract. | none-on-import | `import { kfd4 } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd.js:681` |\n| `kfdProductGateDigest` | function: function kfdProductGateDigest(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { kfdProductGateDigest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:188` |\n| `kfdProductGates` | constant: const kfdProductGates | none | value | Import does not declare a throw contract. | none-on-import | `import { kfdProductGates } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:859` |\n| `KFX_ADMISSION_INPUTS_CONTRACT` | constant: const KFX_ADMISSION_INPUTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFX_ADMISSION_INPUTS_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-verification-envelope.js:7` |\n| `layout` | constant: const layout | none | value | Import does not declare a throw contract. | none-on-import | `import { layout } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd.js:905` |\n| `LEGACY_BUILDCHAIN_CONFIG_PATH` | constant: const LEGACY_BUILDCHAIN_CONFIG_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_CONFIG_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:8` |\n| `LEGACY_BUILDCHAIN_CONTRACT_LOCK_PATH` | constant: const LEGACY_BUILDCHAIN_CONTRACT_LOCK_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_CONTRACT_LOCK_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:10` |\n| `LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH` | constant: const LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:28` |\n| `LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATHS` | constant: const LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATHS | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATHS } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:29` |\n| `LEGACY_BUILDCHAIN_RELEASE_PASSPORT_PATH` | constant: const LEGACY_BUILDCHAIN_RELEASE_PASSPORT_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_RELEASE_PASSPORT_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:34` |\n| `listArtifactSigningProfiles` | function: function listArtifactSigningProfiles() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { listArtifactSigningProfiles } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing.js:103` |\n| `listKfdSchemas` | function: function listKfdSchemas({ standard = \"\" } = {}) | { standard = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { listKfdSchemas } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd.js:492` |\n| `loadBuildchainConfig` | function: function loadBuildchainConfig(cwd = process.cwd()) | cwd = process.cwd() | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { loadBuildchainConfig } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:158` |\n| `loadConfiguredAnchorManifest` | function: function loadConfiguredAnchorManifest(cwd = process.cwd(), loadedConfig = loadBuildchainConfig(cwd)) | cwd = process.cwd(), loadedConfig = loadBuildchainConfig(cwd) | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { loadConfiguredAnchorManifest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:1509` |\n| `makeReleasePassportFixtureAssets` | function: function makeReleasePassportFixtureAssets(dir) | dir | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { makeReleasePassportFixtureAssets } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:2841` |\n| `MANUAL_UPSTREAM_PICKUP_CONFIG_CONTRACT` | constant: const MANUAL_UPSTREAM_PICKUP_CONFIG_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { MANUAL_UPSTREAM_PICKUP_CONFIG_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-pickup.js:16` |\n| `MANUAL_UPSTREAM_PICKUP_PLAN_CONTRACT` | constant: const MANUAL_UPSTREAM_PICKUP_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { MANUAL_UPSTREAM_PICKUP_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-pickup.js:18` |\n| `markStableCandidatePromoted` | function: function markStableCandidatePromoted(ledgerInput, versionInput, { stableTag = \"\", stableSha = \"\", now = new Date().toISOString() } = {}) | ledgerInput, versionInput, { stableTag = \"\", stableSha = \"\", now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { markStableCandidatePromoted } from \"@kungfu-tech/buildchain/core\";` | `packages/core/stable-candidate-ledger.js:229` |\n| `migrateBuildchainLayout` | function: function migrateBuildchainLayout({ cwd = process.cwd(), write = false, force = false } = {}) | { cwd = process.cwd(), write = false, force = false } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { migrateBuildchainLayout } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:287` |\n| `normalizeBuildchainConfig` | function: function normalizeBuildchainConfig(config) | config | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeBuildchainConfig } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:181` |\n| `normalizeBuildchainLogEvent` | function: function normalizeBuildchainLogEvent(input = {}, defaults = {}) | input = {}, defaults = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { normalizeBuildchainLogEvent } from \"@kungfu-tech/buildchain/core\";` | `packages/core/logging.js:45` |\n| `normalizeCandidateTimelineEvent` | function: function normalizeCandidateTimelineEvent(input = {}) | input = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeCandidateTimelineEvent } from \"@kungfu-tech/buildchain/core\";` | `packages/core/candidate-timeline.js:74` |\n| `normalizeControllerReceiptReferences` | function: function normalizeControllerReceiptReferences({ receipts = [], references = [], expectedSourceSha = \"\", acceptedSourceShas = [], expectedRuntimeSha = \"\", requirePassed = false, } = {}) | { receipts = [], references = [], expectedSourceSha = \"\", acceptedSourceShas = [], expectedRuntimeSha = \"\", requirePassed = false, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeControllerReceiptReferences } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:531` |\n| `normalizeGitHubArtifactAttestationPolicy` | function: function normalizeGitHubArtifactAttestationPolicy(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeGitHubArtifactAttestationPolicy } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:158` |\n| `normalizeGithubBranchProtectionSnapshot` | function: function normalizeGithubBranchProtectionSnapshot(protection = {}) | protection = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { normalizeGithubBranchProtectionSnapshot } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:1025` |\n| `normalizeGithubRulesetSnapshot` | function: function normalizeGithubRulesetSnapshot(ruleset = {}) | ruleset = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { normalizeGithubRulesetSnapshot } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:1095` |\n| `normalizeIssueRepository` | function: function normalizeIssueRepository(repository = DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY) | repository = DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeIssueRepository } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:33` |\n| `normalizeKfd1ContractWorldWitness` | function: function normalizeKfd1ContractWorldWitness(witness, { metadata = resolveKfd1Metadata() } = {}) | witness, { metadata = resolveKfd1Metadata() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfd1ContractWorldWitness } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:897` |\n| `normalizeKfd3CollaborationInterfaceArtifactWitness` | function: function normalizeKfd3CollaborationInterfaceArtifactWitness(witness, { metadata = resolveKfd3Metadata() } = {}) | witness, { metadata = resolveKfd3Metadata() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfd3CollaborationInterfaceArtifactWitness } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:738` |\n| `normalizeKfd3CollaborationInterfacePrebuildWitness` | function: function normalizeKfd3CollaborationInterfacePrebuildWitness(witness, { metadata = resolveKfd3Metadata() } = {}) | witness, { metadata = resolveKfd3Metadata() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfd3CollaborationInterfacePrebuildWitness } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:667` |\n| `normalizeKfd3DistributionDeclaration` | function: function normalizeKfd3DistributionDeclaration(distribution, { surfaceId = \"surface\" } = {}) | distribution, { surfaceId = \"surface\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfd3DistributionDeclaration } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd3-surface-register.js:73` |\n| `normalizeKfdStandardId` | function: function normalizeKfdStandardId(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfdStandardId } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd.js:455` |\n| `normalizeLifecycleStage` | function: function normalizeLifecycleStage(stage, label = \"lifecycle stage\", lifecycle = {}) | stage, label = \"lifecycle stage\", lifecycle = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeLifecycleStage } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:1333` |\n| `normalizeManualUpstreamPickupConfig` | function: function normalizeManualUpstreamPickupConfig(input) | input | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeManualUpstreamPickupConfig } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-pickup.js:118` |\n| `normalizePackageReleasePropagationConfig` | function: function normalizePackageReleasePropagationConfig(input) | input | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizePackageReleasePropagationConfig } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-capture.js:63` |\n| `normalizeReleasePropagationGraph` | function: function normalizeReleasePropagationGraph(input) | input | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeReleasePropagationGraph } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation.js:163` |\n| `normalizeStableCandidateLedger` | function: function normalizeStableCandidateLedger(input, expected = {}) | input, expected = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeStableCandidateLedger } from \"@kungfu-tech/buildchain/core\";` | `packages/core/stable-candidate-ledger.js:76` |\n| `PACKAGE_RELEASE_PROPAGATION_CONFIG_CONTRACT` | constant: const PACKAGE_RELEASE_PROPAGATION_CONFIG_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PACKAGE_RELEASE_PROPAGATION_CONFIG_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-capture.js:17` |\n| `PAPER_ALPHA_PLAN_CONTRACT` | constant: const PAPER_ALPHA_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_ALPHA_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:90` |\n| `PAPER_BUILD_PLAN_CONTRACT` | constant: const PAPER_BUILD_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_BUILD_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:89` |\n| `PAPER_FLEET_AUDIT_CONTRACT` | constant: const PAPER_FLEET_AUDIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_FLEET_AUDIT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-fleet.js:19` |\n| `PAPER_FLEET_UPDATE_PLAN_CONTRACT` | constant: const PAPER_FLEET_UPDATE_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_FLEET_UPDATE_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-fleet.js:20` |\n| `PAPER_MIGRATION_CONTRACT` | constant: const PAPER_MIGRATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_MIGRATION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:82` |\n| `PAPER_NPM_BOOTSTRAP_CONTRACT` | constant: const PAPER_NPM_BOOTSTRAP_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_NPM_BOOTSTRAP_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:85` |\n| `PAPER_PATHS` | constant: const PAPER_PATHS | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_PATHS } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-repository.js:7` |\n| `PAPER_PREFLIGHT_CONTRACT` | constant: const PAPER_PREFLIGHT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_PREFLIGHT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:83` |\n| `PAPER_RESUME_PLAN_CONTRACT` | constant: const PAPER_RESUME_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_RESUME_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:91` |\n| `PAPER_SCAFFOLD_CONTRACT` | constant: const PAPER_SCAFFOLD_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_SCAFFOLD_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:81` |\n| `PAPER_STATE_ORDER` | constant: const PAPER_STATE_ORDER | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_STATE_ORDER } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:94` |\n| `PAPER_STATUS_CONTRACT` | constant: const PAPER_STATUS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_STATUS_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:84` |\n| `PAPER_VISIBILITY_CONTRACT` | constant: const PAPER_VISIBILITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_VISIBILITY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:92` |\n| `PAPER_WORK_START_PLAN_CONTRACT` | constant: const PAPER_WORK_START_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_WORK_START_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-work.js:17` |\n| `PAPER_WORK_SUBMIT_PLAN_CONTRACT` | constant: const PAPER_WORK_SUBMIT_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_WORK_SUBMIT_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-work.js:19` |\n| `paperFleetTransitionWorkspace` | function: function paperFleetTransitionWorkspace(workspaceText, lockText) | workspaceText, lockText | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { paperFleetTransitionWorkspace } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-fleet.js:290` |\n| `parseCodeowners` | function: function parseCodeowners(source) | source | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { parseCodeowners } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:401` |\n| `parseIssueLabels` | function: function parseIssueLabels(input = DEFAULT_LABELS) | input = DEFAULT_LABELS | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { parseIssueLabels } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:41` |\n| `planBuildchainLayoutMigration` | function: function planBuildchainLayoutMigration({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { planBuildchainLayoutMigration } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:265` |\n| `planPaperFleetUpdate` | function: function planPaperFleetUpdate(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { planPaperFleetUpdate } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-fleet.js:209` |\n| `planPaperMigration` | function: function planPaperMigration({ cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainSha = \"\", } = {}) | { cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainSha = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { planPaperMigration } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:1013` |\n| `planPaperScaffold` | function: function planPaperScaffold({ cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainRef = \"v3\", buildchainSha = \"\", name = path.basename(path.resolve(cwd)), title = \"\", packageName = \"\", repository = \"\", version = \"0.1.0-alpha.0\", siteBaseUrl = \"\", } = {}) | { cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainRef = \"v3\", buildchainSha = \"\", name = path.basename(path.resolve(cwd)), title = \"\", packageName = \"\", repository = \"\", version = \"0.1.0-alpha.0\", siteBaseUrl = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { planPaperScaffold } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:702` |\n| `planReleaseLineBootstrap` | function: function planReleaseLineBootstrap({ cwd = process.cwd(), major, minor, sourceRef = \"\", initialVersion = \"\", requiredStatusCheck = \"check\", setDefault = true, createAlphaPr = true, approvalCount = 1, bootstrapBranch = \"\", } = {}) | { cwd = process.cwd(), major, minor, sourceRef = \"\", initialVersion = \"\", requiredStatusCheck = \"check\", setDefault = true, createAlphaPr = true, approvalCount = 1, bootstrapBranch = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { planReleaseLineBootstrap } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-line-bootstrap.js:140` |\n| `planReleasePropagation` | function: function planReleasePropagation({ graph: graphInput, upstreamRelease: releaseInput, sourceNode = \"\" } = {}) | { graph: graphInput, upstreamRelease: releaseInput, sourceNode = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { planReleasePropagation } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation.js:249` |\n| `planTransactionRecovery` | function: function planTransactionRecovery({ transaction, evidence, validation, explicitOverride = false, } = {}) | { transaction, evidence, validation, explicitOverride = false, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { planTransactionRecovery } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publish-transaction.js:769` |\n| `prepareGitHubArtifactAttestation` | function: function prepareGitHubArtifactAttestation({ subjectPath, platformManifestPath, releasePassportPath, policy, expectedBuildchainRef = \"\", expectedCallerRepository = \"\", expectedSourceSha = \"\", } = {}) | { subjectPath, platformManifestPath, releasePassportPath, policy, expectedBuildchainRef = \"\", expectedCallerRepository = \"\", expectedSourceSha = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { prepareGitHubArtifactAttestation } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:250` |\n| `preparePublicationNpmPackage` | function: function preparePublicationNpmPackage({ cwd = process.cwd(), outputDir = \".buildchain/publication/npm-package\", packageName = \"\", } = {}) | { cwd = process.cwd(), outputDir = \".buildchain/publication/npm-package\", packageName = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { preparePublicationNpmPackage } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-package.js:120` |\n| `PRODUCT_MECHANISM_CONTRACT` | constant: const PRODUCT_MECHANISM_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PRODUCT_MECHANISM_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:32` |\n| `projectArtifactVerificationEnvelopeToKfx` | function: function projectArtifactVerificationEnvelopeToKfx({ envelope, assessmentTime = Math.floor(Date.now() / 1000), expectedEnvelopeRoot = \"\", expectedIssuer = \"\", expectedPublisher = \"\", expectedContractVersion = \"\", } = {}) | { envelope, assessmentTime = Math.floor(Date.now() / 1000), expectedEnvelopeRoot = \"\", expectedIssuer = \"\", expectedPublisher = \"\", expectedContractVersion = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { projectArtifactVerificationEnvelopeToKfx } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-verification-envelope.js:359` |\n| `PUBLICATION_ADMISSION_CONTRACT` | constant: const PUBLICATION_ADMISSION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ADMISSION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:10` |\n| `PUBLICATION_ARTIFACT_ARCHIVE_CONTRACT` | constant: const PUBLICATION_ARTIFACT_ARCHIVE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_ARCHIVE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-artifact.js:9` |\n| `PUBLICATION_ARTIFACT_CANDIDATE_CONTRACT` | constant: const PUBLICATION_ARTIFACT_CANDIDATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_CANDIDATE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-artifact-candidate.js:5` |\n| `PUBLICATION_ARTIFACT_MANIFEST_CONTRACT` | constant: const PUBLICATION_ARTIFACT_MANIFEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_MANIFEST_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-artifact.js:7` |\n| `PUBLICATION_ARTIFACT_MANIFEST_SET_CONTRACT` | constant: const PUBLICATION_ARTIFACT_MANIFEST_SET_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_MANIFEST_SET_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:24` |\n| `PUBLICATION_ARTIFACT_PASSPORT_CONTRACT` | constant: const PUBLICATION_ARTIFACT_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_PASSPORT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-artifact.js:8` |\n| `PUBLICATION_ARTIFACT_REGISTRY_CONTRACT` | constant: const PUBLICATION_ARTIFACT_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-artifact.js:10` |\n| `PUBLICATION_AUTHORITY_CLASSES` | constant: const PUBLICATION_AUTHORITY_CLASSES | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_AUTHORITY_CLASSES } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:27` |\n| `PUBLICATION_AUTHORITY_REGISTRY_CONTRACT` | constant: const PUBLICATION_AUTHORITY_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_AUTHORITY_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:8` |\n| `PUBLICATION_CAPABILITY_CONTRACT` | constant: const PUBLICATION_CAPABILITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_CAPABILITY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:12` |\n| `PUBLICATION_CONTROL_PLANE_AUDIT_CONTRACT` | constant: const PUBLICATION_CONTROL_PLANE_AUDIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_CONTROL_PLANE_AUDIT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:16` |\n| `PUBLICATION_GATE_DECISION_CONTRACT` | constant: const PUBLICATION_GATE_DECISION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_GATE_DECISION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:18` |\n| `PUBLICATION_NPM_PACKAGE_CONTRACT` | constant: const PUBLICATION_NPM_PACKAGE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_NPM_PACKAGE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-package.js:6` |\n| `PUBLICATION_QUALIFICATION_RECEIPT_CONTRACT` | constant: const PUBLICATION_QUALIFICATION_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_QUALIFICATION_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:22` |\n| `PUBLICATION_REPRODUCIBILITY_RECEIPT_CONTRACT` | constant: const PUBLICATION_REPRODUCIBILITY_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_REPRODUCIBILITY_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-reproducibility.js:12` |\n| `PUBLICATION_SEALED_BUNDLE_CONTRACT` | constant: const PUBLICATION_SEALED_BUNDLE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_SEALED_BUNDLE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-sealed-bundle.js:10` |\n| `publicationArtifactCandidateDigest` | function: function publicationArtifactCandidateDigest(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { publicationArtifactCandidateDigest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-artifact-candidate.js:19` |\n| `publicationAuthorityDigest` | function: function publicationAuthorityDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { publicationAuthorityDigest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:72` |\n| `publicationGateAggregateBindings` | function: function publicationGateAggregateBindings(gateAggregate) | gateAggregate | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { publicationGateAggregateBindings } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:408` |\n| `qualifyStableCandidate` | function: function qualifyStableCandidate(ledgerInput, observation, { minimumSoakSeconds = 3600, now = new Date().toISOString() } = {}) | ledgerInput, observation, { minimumSoakSeconds = 3600, now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { qualifyStableCandidate } from \"@kungfu-tech/buildchain/core\";` | `packages/core/stable-candidate-ledger.js:139` |\n| `queryKfd3Capabilities` | function: async function queryKfd3Capabilities({ cwd = process.cwd(), product = \"\", registryPath = \"\", passportLocation = \"\", artifactPath = \"\", } = {}) | { cwd = process.cwd(), product = \"\", registryPath = \"\", passportLocation = \"\", artifactPath = \"\", } = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { queryKfd3Capabilities } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd3-surface-register.js:824` |\n| `readBuildchainContractLock` | function: function readBuildchainContractLock(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readBuildchainContractLock } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-contract.js:838` |\n| `readBuildchainContractWorld` | function: function readBuildchainContractWorld(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readBuildchainContractWorld } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-contract.js:818` |\n| `readBuildchainLogEvents` | function: function readBuildchainLogEvents(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readBuildchainLogEvents } from \"@kungfu-tech/buildchain/core\";` | `packages/core/logging.js:75` |\n| `readDiagnosticsArtifact` | function: function readDiagnosticsArtifact(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readDiagnosticsArtifact } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:1468` |\n| `readJsonFromLocation` | function: async function readJsonFromLocation(location, redirectCount = 0, { timeoutMs = 15_000 } = {}) | location, redirectCount = 0, { timeoutMs = 15_000 } = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readJsonFromLocation } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:2694` |\n| `readKfd2ProductClaimsRegistry` | function: function readKfd2ProductClaimsRegistry({ cwd = process.cwd(), registryPath = BUILDCHAIN_KFD2_REGISTRY_PATH, } = {}) | { cwd = process.cwd(), registryPath = BUILDCHAIN_KFD2_REGISTRY_PATH, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readKfd2ProductClaimsRegistry } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd2-product-claims.js:137` |\n| `readKfd3SurfaceRegistry` | function: function readKfd3SurfaceRegistry({ cwd = process.cwd(), registryPath = \"\" } = {}) | { cwd = process.cwd(), registryPath = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readKfd3SurfaceRegistry } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd3-surface-register.js:455` |\n| `readKfdSchema` | function: function readKfdSchema({ standard, schema = \"\" } = {}) | { standard, schema = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readKfdSchema } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd.js:520` |\n| `README_BADGE_BLOCK_END` | constant: const README_BADGE_BLOCK_END | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_BLOCK_END } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:15` |\n| `README_BADGE_BLOCK_START` | constant: const README_BADGE_BLOCK_START | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_BLOCK_START } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:14` |\n| `README_BADGE_FACTS_CONTRACT` | constant: const README_BADGE_FACTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_FACTS_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:12` |\n| `README_BADGE_HOSTED_BASE_URL` | constant: const README_BADGE_HOSTED_BASE_URL | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_HOSTED_BASE_URL } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:16` |\n| `readOptionalIssueBodyFile` | function: function readOptionalIssueBodyFile(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readOptionalIssueBodyFile } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:385` |\n| `readPublishEvidence` | function: function readPublishEvidence(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readPublishEvidence } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publish-transaction.js:564` |\n| `readReadme` | function: function readReadme({ cwd = process.cwd(), readmePath = \"README.md\" } = {}) | { cwd = process.cwd(), readmePath = \"README.md\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readReadme } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:891` |\n| `readReleasePropagationJson` | function: function readReleasePropagationJson(value, { cwd = process.cwd(), label = \"json\" } = {}) | value, { cwd = process.cwd(), label = \"json\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readReleasePropagationJson } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation.js:305` |\n| `readReleaseTransaction` | function: function readReleaseTransaction(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readReleaseTransaction } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publish-transaction.js:367` |\n| `recordReleaseActivationPhase` | function: function recordReleaseActivationPhase(transaction, phaseId, { receiptRoots = [], failure = \"\" } = {}) | transaction, phaseId, { receiptRoots = [], failure = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { recordReleaseActivationPhase } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-activation-transaction.js:217` |\n| `recordReleasePropagationStage` | function: function recordReleasePropagationStage({ work, expectedWorkRoot, receipt } = {}) | { work, expectedWorkRoot, receipt } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { recordReleasePropagationStage } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-work-transitions.js:45` |\n| `redactBuildchainLogAttributes` | function: function redactBuildchainLogAttributes(attributes = {}) | attributes = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { redactBuildchainLogAttributes } from \"@kungfu-tech/buildchain/core\";` | `packages/core/logging.js:33` |\n| `redactDiagnosticsValue` | function: function redactDiagnosticsValue(key, value, pattern = DEFAULT_SECRET_KEY_PATTERN) | key, value, pattern = DEFAULT_SECRET_KEY_PATTERN | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { redactDiagnosticsValue } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:953` |\n| `redactIssueText` | function: function redactIssueText(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { redactIssueText } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:51` |\n| `registerKfd3Surfaces` | function: function registerKfd3Surfaces({ cwd = process.cwd(), registryPath = \"\", kinds = [], artifactPath = \"\", product = {}, } = {}) | { cwd = process.cwd(), registryPath = \"\", kinds = [], artifactPath = \"\", product = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { registerKfd3Surfaces } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd3-surface-register.js:502` |\n| `registerStableCandidate` | function: function registerStableCandidate(ledgerInput, candidateInput, { now = new Date().toISOString() } = {}) | ledgerInput, candidateInput, { now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { registerStableCandidate } from \"@kungfu-tech/buildchain/core\";` | `packages/core/stable-candidate-ledger.js:106` |\n| `RELEASE_ACTIVATION_CONTRACT` | constant: const RELEASE_ACTIVATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_ACTIVATION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-activation-transaction.js:3` |\n| `RELEASE_ACTIVATION_PHASES` | constant: const RELEASE_ACTIVATION_PHASES | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_ACTIVATION_PHASES } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-activation-transaction.js:8` |\n| `RELEASE_ACTIVATION_RECEIPT_SET_CONTRACT` | constant: const RELEASE_ACTIVATION_RECEIPT_SET_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_ACTIVATION_RECEIPT_SET_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-activation-transaction.js:5` |\n| `RELEASE_CANDIDATE_PASSPORT_CONTRACT` | constant: const RELEASE_CANDIDATE_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_CANDIDATE_PASSPORT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-candidate.js:4` |\n| `RELEASE_CHECK_REPORT_CONTRACT` | constant: const RELEASE_CHECK_REPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_CHECK_REPORT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:33` |\n| `RELEASE_EVIDENCE_ATTACHMENT_CONTRACT` | constant: const RELEASE_EVIDENCE_ATTACHMENT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_EVIDENCE_ATTACHMENT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:34` |\n| `RELEASE_PASSPORT_CHECK_MANIFEST_CONTRACT` | constant: const RELEASE_PASSPORT_CHECK_MANIFEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PASSPORT_CHECK_MANIFEST_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport-contract.js:9` |\n| `RELEASE_PASSPORT_CONTRACT` | constant: const RELEASE_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PASSPORT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:28` |\n| `RELEASE_PASSPORT_SCHEMA` | constant: const RELEASE_PASSPORT_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PASSPORT_SCHEMA } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport-contract.js:16` |\n| `RELEASE_PASSPORT_SCHEMA_ID` | constant: const RELEASE_PASSPORT_SCHEMA_ID | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PASSPORT_SCHEMA_ID } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport-contract.js:7` |\n| `RELEASE_PROPAGATION_GRAPH_CONTRACT` | constant: const RELEASE_PROPAGATION_GRAPH_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_GRAPH_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation.js:15` |\n| `RELEASE_PROPAGATION_LOCK_CONTRACT` | constant: const RELEASE_PROPAGATION_LOCK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_LOCK_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation.js:17` |\n| `RELEASE_PROPAGATION_PLAN_CONTRACT` | value: RELEASE_PROPAGATION_PLAN_CONTRACT | none | unknown | No narrower error contract was mechanically discoverable. | unknown | `import { RELEASE_PROPAGATION_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation.js:1` |\n| `RELEASE_PROPAGATION_RECEIPT_CONTRACT` | constant: const RELEASE_PROPAGATION_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation.js:18` |\n| `RELEASE_PROPAGATION_STAGE_RECEIPT_CONTRACT` | constant: const RELEASE_PROPAGATION_STAGE_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_STAGE_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-work-constants.js:2` |\n| `RELEASE_PROPAGATION_WORK_CONTRACT` | constant: const RELEASE_PROPAGATION_WORK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_WORK_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-work-constants.js:1` |\n| `RELEASE_PROPAGATION_WORK_STAGES` | constant: const RELEASE_PROPAGATION_WORK_STAGES | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_WORK_STAGES } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-work-constants.js:4` |\n| `releaseActivationRoot` | function: function releaseActivationRoot(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { releaseActivationRoot } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-activation-transaction.js:38` |\n| `renderBadgeBundleBlock` | function: function renderBadgeBundleBlock(facts) | facts | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { renderBadgeBundleBlock } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:840` |\n| `renderBuildchainContractDriftIssueBody` | function: function renderBuildchainContractDriftIssueBody({ repository = \"\", workflow = \"\", runUrl = \"\", lockPath = \"\", evaluation, } = {}) | { repository = \"\", workflow = \"\", runUrl = \"\", lockPath = \"\", evaluation, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { renderBuildchainContractDriftIssueBody } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-contract.js:957` |\n| `renderHomebrewFormula` | function: function renderHomebrewFormula(facts) | facts | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { renderHomebrewFormula } from \"@kungfu-tech/buildchain/core\";` | `packages/core/homebrew.js:290` |\n| `renderKfd2ProductClaimOutputs` | function: function renderKfd2ProductClaimOutputs({ cwd = process.cwd(), registryPath = BUILDCHAIN_KFD2_REGISTRY_PATH, outputDir = BUILDCHAIN_KFD2_DIR, version = \"\", channel = \"\", tag = \"\", sourceSha = \"\", } = {}) | { cwd = process.cwd(), registryPath = BUILDCHAIN_KFD2_REGISTRY_PATH, outputDir = BUILDCHAIN_KFD2_DIR, version = \"\", channel = \"\", tag = \"\", sourceSha = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { renderKfd2ProductClaimOutputs } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd2-product-claims.js:321` |\n| `renderReadmeBadgeBlock` | function: function renderReadmeBadgeBlock(facts) | facts | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { renderReadmeBadgeBlock } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:836` |\n| `repairReleasePropagationWork` | function: function repairReleasePropagationWork({ work, expectedWorkRoot, receipt } = {}) | { work, expectedWorkRoot, receipt } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { repairReleasePropagationWork } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-work-transitions.js:88` |\n| `reportBuildchainIssue` | function: async function reportBuildchainIssue(options = {}) | options = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { reportBuildchainIssue } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:292` |\n| `reportWorkflowFrictionIssue` | function: async function reportWorkflowFrictionIssue(options = {}) | options = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { reportWorkflowFrictionIssue } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:378` |\n| `resolveArtifactSigningProfile` | function: function resolveArtifactSigningProfile({ profile = \"auto\", platform = \"\", artifactKind = \"binary\", } = {}) | { profile = \"auto\", platform = \"\", artifactKind = \"binary\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveArtifactSigningProfile } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing.js:111` |\n| `resolveArtifactSubject` | function: async function resolveArtifactSubject(subject, { cwd = process.cwd(), subjectDigest = \"\", subjectKind = \"\", npmRegistryBaseUrl = \"\", } = {}) | subject, { cwd = process.cwd(), subjectDigest = \"\", subjectKind = \"\", npmRegistryBaseUrl = \"\", } = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveArtifactSubject } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-passport.js:368` |\n| `resolveBuildchainConfigPath` | function: function resolveBuildchainConfigPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveBuildchainConfigPath } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:67` |\n| `resolveBuildchainContractLockPath` | function: function resolveBuildchainContractLockPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveBuildchainContractLockPath } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:74` |\n| `resolveGithubGovernanceTargetPolicy` | function: function resolveGithubGovernanceTargetPolicy({ descriptor = BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY, repository, targetRef, } = {}) | { descriptor = BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY, repository, targetRef, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveGithubGovernanceTargetPolicy } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:607` |\n| `resolveKfd1Metadata` | function: function resolveKfd1Metadata() | none | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveKfd1Metadata } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:89` |\n| `resolveKfd2ProductClaimsRegistryPath` | function: function resolveKfd2ProductClaimsRegistryPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveKfd2ProductClaimsRegistryPath } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:81` |\n| `resolveKfd3Metadata` | function: function resolveKfd3Metadata({ requireSchemas = false } = {}) | { requireSchemas = false } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveKfd3Metadata } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:128` |\n| `resolveKfd3SurfaceRegistryPath` | function: function resolveKfd3SurfaceRegistryPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveKfd3SurfaceRegistryPath } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:85` |\n| `resolveNpmRegistryRelease` | function: function resolveNpmRegistryRelease({ source: sourceInput, channel, packageMetadata, attestations, }) | { source: sourceInput, channel, packageMetadata, attestations, } | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveNpmRegistryRelease } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-pickup.js:167` |\n| `resolvePaperRepository` | function: function resolvePaperRepository(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolvePaperRepository } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-repository.js:133` |\n| `resolvePropagationChannel` | function: function resolvePropagationChannel(edge, upstreamChannel) | edge, upstreamChannel | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolvePropagationChannel } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation.js:190` |\n| `resolvePublicationCandidateFile` | function: function resolvePublicationCandidateFile(files = [], candidatePath) | files = [], candidatePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolvePublicationCandidateFile } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-artifact-candidate.js:23` |\n| `resolveReleasePassportPath` | function: function resolveReleasePassportPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveReleasePassportPath } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:92` |\n| `resumeReleasePropagationWork` | function: function resumeReleasePropagationWork(work) | work | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resumeReleasePropagationWork } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-work.js:518` |\n| `revokeStableCandidate` | function: function revokeStableCandidate(ledgerInput, versionInput, { reason, actor = \"\", now = new Date().toISOString() } = {}) | ledgerInput, versionInput, { reason, actor = \"\", now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { revokeStableCandidate } from \"@kungfu-tech/buildchain/core\";` | `packages/core/stable-candidate-ledger.js:185` |\n| `rollbackReleaseActivationTransaction` | function: function rollbackReleaseActivationTransaction(transaction, { toSiteSourceSha, reason } = {}) | transaction, { toSiteSourceSha, reason } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { rollbackReleaseActivationTransaction } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-activation-transaction.js:290` |\n| `runLifecycleStage` | function: function runLifecycleStage({ cwd = process.cwd(), loadedConfig, name, stage, env: extraEnv, timeoutMinutes }) | { cwd = process.cwd(), loadedConfig, name, stage, env: extraEnv, timeoutMinutes } | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { runLifecycleStage } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:1380` |\n| `RUNNER_PROVENANCE_CLASSES` | constant: const RUNNER_PROVENANCE_CLASSES | none | value | Import does not declare a throw contract. | none-on-import | `import { RUNNER_PROVENANCE_CLASSES } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:36` |\n| `RUNNER_PROVENANCE_CONTRACT` | constant: const RUNNER_PROVENANCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RUNNER_PROVENANCE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:14` |\n| `schemas` | constant: const schemas | none | value | Import does not declare a throw contract. | none-on-import | `import { schemas } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd.js:495` |\n| `sealArtifactVerificationReport` | function: function sealArtifactVerificationReport({ report, bindings, kfdAssessment, issuedAt, expiresAt, revocation, } = {}) | { report, bindings, kfdAssessment, issuedAt, expiresAt, revocation, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sealArtifactVerificationReport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-verification-envelope.js:314` |\n| `selectStableCandidate` | function: function selectStableCandidate(ledgerInput, { releaseNow = \"\", now = new Date().toISOString() } = {}) | ledgerInput, { releaseNow = \"\", now = new Date().toISOString() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { selectStableCandidate } from \"@kungfu-tech/buildchain/core\";` | `packages/core/stable-candidate-ledger.js:206` |\n| `setStableCandidateHold` | function: function setStableCandidateHold(ledgerInput, enabled, { reason = \"\", now = new Date().toISOString() } = {}) | ledgerInput, enabled, { reason = \"\", now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { setStableCandidateHold } from \"@kungfu-tech/buildchain/core\";` | `packages/core/stable-candidate-ledger.js:198` |\n| `sha256BuildchainContractJson` | function: function sha256Json(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { sha256BuildchainContractJson } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-contract.js:30` |\n| `sha256File` | function: function sha256File(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write, subprocess | `import { sha256File } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:216` |\n| `sha256Json` | function: function sha256Json(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sha256Json } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-candidate.js:90` |\n| `sha256KfdJson` | function: function sha256Json(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { sha256KfdJson } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:50` |\n| `sha256Text` | function: function sha256Text(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sha256Text } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:138` |\n| `sha512IntegrityBuffer` | function: function sha512IntegrityBuffer(buffer) | buffer | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { sha512IntegrityBuffer } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-passport.js:34` |\n| `sha512IntegrityFile` | function: function sha512IntegrityFile(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sha512IntegrityFile } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-passport.js:38` |\n| `shellJoin` | function: function shellJoin(command) | command | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { shellJoin } from \"@kungfu-tech/buildchain/core\";` | `packages/core/package-manager.js:114` |\n| `signDetachedArtifactRequest` | function: function signDetachedArtifactRequest({ request, privateKey, keyId, authority = {}, } = {}) | { request, privateKey, keyId, authority = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { signDetachedArtifactRequest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/detached-artifact-signature.js:36` |\n| `STABLE_CANDIDATE_LEDGER_CONTRACT` | constant: const STABLE_CANDIDATE_LEDGER_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { STABLE_CANDIDATE_LEDGER_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/stable-candidate-ledger.js:1` |\n| `STABLE_CANDIDATE_STATES` | constant: const STABLE_CANDIDATE_STATES | none | value | Import does not declare a throw contract. | none-on-import | `import { STABLE_CANDIDATE_STATES } from \"@kungfu-tech/buildchain/core\";` | `packages/core/stable-candidate-ledger.js:2` |\n| `stableCandidatePromotionRefs` | function: function stableCandidatePromotionRefs(candidateInput, targetBranch) | candidateInput, targetBranch | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { stableCandidatePromotionRefs } from \"@kungfu-tech/buildchain/core\";` | `packages/core/stable-candidate-ledger.js:264` |\n| `startProcessSampler` | function: function startProcessSampler({ rootPid = process.pid, intervalMs = 15000, label = \"\", command = \"\", args = [], env = process.env, requestedParallelism = 0, onSample = () => undefined, cwd = process.cwd(), } = {}) | { rootPid = process.pid, intervalMs = 15000, label = \"\", command = \"\", args = [], env = process.env, requestedParallelism = 0, onSample = () => undefined, cwd = process.cwd(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { startProcessSampler } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:1362` |\n| `summarizeBuildchainLogEvents` | function: function summarizeBuildchainLogEvents(input = {}) | input = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { summarizeBuildchainLogEvents } from \"@kungfu-tech/buildchain/core\";` | `packages/core/logging.js:192` |\n| `summarizeDiagnosticsArtifacts` | function: function summarizeDiagnosticsArtifacts(inputs = []) | inputs = [] | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { summarizeDiagnosticsArtifacts } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:1824` |\n| `summarizeLifecycleObservability` | function: function summarizeLifecycleObservability({ events = [], logPath = \"\", artifactScanDurationMs = 0, artifactUploadDurationMs = 0, totalBytes = 0, fileCount = 0, } = {}) | { events = [], logPath = \"\", artifactScanDurationMs = 0, artifactUploadDurationMs = 0, totalBytes = 0, fileCount = 0, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { summarizeLifecycleObservability } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:219` |\n| `summarizeProcessSamples` | function: function summarizeProcessSamples({ samples = [], requestedParallelism = 0, command = \"\", args = [], env = process.env, activeCpuThreshold = 0.1, } = {}) | { samples = [], requestedParallelism = 0, command = \"\", args = [], env = process.env, activeCpuThreshold = 0.1, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { summarizeProcessSamples } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:1254` |\n| `SURFACE_TIMESTAMP_POLICY_CONTRACT` | constant: const SURFACE_TIMESTAMP_POLICY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { SURFACE_TIMESTAMP_POLICY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/surface-manifest.js:1` |\n| `testKfdAgentHub` | function: function testKfdAgentHub({ cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, outputDir = KFD_AGENT_HUB_OUTPUT_DIR, kfdRoot = \"\", run = defaultRun } = {}) | { cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, outputDir = KFD_AGENT_HUB_OUTPUT_DIR, kfdRoot = \"\", run = defaultRun } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { testKfdAgentHub } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-agent-hub.js:399` |\n| `transitionReleaseTransaction` | function: function transitionReleaseTransaction(record, nextState, metadata = {}) | record, nextState, metadata = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { transitionReleaseTransaction } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publish-transaction.js:256` |\n| `truncateUtf8` | function: function truncateUtf8(text, maxBytes = DEFAULT_MAX_BODY_BYTES) | text, maxBytes = DEFAULT_MAX_BODY_BYTES | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { truncateUtf8 } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:84` |\n| `updateBadgeBundleBlock` | function: function updateBadgeBundleBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { updateBadgeBundleBlock } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:887` |\n| `updateConfiguredVersionStateContents` | function: function updateConfiguredVersionStateContents(files, version) | files, version | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { updateConfiguredVersionStateContents } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:1680` |\n| `updateHomebrewTap` | function: async function updateHomebrewTap({ cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", write = true, } = {}) | { cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", write = true, } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { updateHomebrewTap } from \"@kungfu-tech/buildchain/core\";` | `packages/core/homebrew.js:390` |\n| `updateReadmeBadgeBlock` | function: function updateReadmeBadgeBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { updateReadmeBadgeBlock } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:874` |\n| `validateAnchoredPackageRelease` | function: function validateAnchoredPackageRelease({ cwd = process.cwd(), requireManifest = true, requirePackageSetOrder = \"platforms-first-main-last\", requireTrustedPublishing = true, requireLifecycleStages = [\"install\", \"build\", \"verify\", \"publish\"], requirePublishGateSourceLock = false, publishSource = undefined, env = process.env, } = {}) | { cwd = process.cwd(), requireManifest = true, requirePackageSetOrder = \"platforms-first-main-last\", requireTrustedPublishing = true, requireLifecycleStages = [\"install\", \"build\", \"verify\", \"publish\"], requirePublishGateSourceLock = false, publishSource = undefined, env = process.env, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateAnchoredPackageRelease } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:325` |\n| `validateArtifactSigningReceipt` | function: function validateArtifactSigningReceipt(receipt, { request } = {}) | receipt, { request } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateArtifactSigningReceipt } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing.js:374` |\n| `validateArtifactSigningRequest` | function: function validateArtifactSigningRequest(request) | request | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateArtifactSigningRequest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing.js:291` |\n| `validateArtifactSigningResult` | function: function validateArtifactSigningResult(result, { request, receipt } = {}) | result, { request, receipt } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateArtifactSigningResult } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing-result.js:147` |\n| `validateBuildchainConfig` | function: function validateBuildchainConfig(cwd = process.cwd(), { requireConfig = true, requireVersionState = false, requireLifecycleStages = [], } = {}) | cwd = process.cwd(), { requireConfig = true, requireVersionState = false, requireLifecycleStages = [], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateBuildchainConfig } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:1547` |\n| `validateControllerPlan` | function: function validateControllerPlan(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateControllerPlan } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:324` |\n| `validateControllerReceipt` | function: function validateControllerReceipt(receipt, { plan = undefined, expectedSourceSha = \"\", expectedRuntimeSha = \"\", expectedPlanDigest = \"\", } = {}) | receipt, { plan = undefined, expectedSourceSha = \"\", expectedRuntimeSha = \"\", expectedPlanDigest = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateControllerReceipt } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:422` |\n| `validateControllerReceiptReference` | function: function validateControllerReceiptReference(reference, { expectedSourceSha = \"\", acceptedSourceShas = [], expectedRuntimeSha = \"\", requirePassed = false, } = {}) | reference, { expectedSourceSha = \"\", acceptedSourceShas = [], expectedRuntimeSha = \"\", requirePassed = false, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateControllerReceiptReference } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:504` |\n| `validateKfd1ReleaseGateEvidence` | function: function validateKfd1ReleaseGateEvidence(section, { metadata = resolveKfd1Metadata() } = {}) | section, { metadata = resolveKfd1Metadata() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfd1ReleaseGateEvidence } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:1337` |\n| `validateKfd2ProductClaimsRegistry` | function: function validateKfd2ProductClaimsRegistry(registry = {}) | registry = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateKfd2ProductClaimsRegistry } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd2-product-claims.js:152` |\n| `validateKfd3CollaborationInterfaceReleaseGateEvidence` | function: function validateKfd3CollaborationInterfaceReleaseGateEvidence(section, { metadata = resolveKfd3Metadata() } = {}) | section, { metadata = resolveKfd3Metadata() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfd3CollaborationInterfaceReleaseGateEvidence } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:1470` |\n| `validateKfdProductGateResult` | function: function validateKfdProductGateResult(result, { expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {}) | result, { expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfdProductGateResult } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:565` |\n| `validateKfdSupportProjection` | function: function validateKfdSupportProjection(projection, { expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {}) | projection, { expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfdSupportProjection } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:796` |\n| `validateKnownReleasePassportContracts` | function: function validateKnownReleasePassportContracts() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKnownReleasePassportContracts } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:2853` |\n| `validatePackageManagerContract` | function: function validatePackageManagerContract({ cwd = process.cwd(), expectedManager = \"\" } = {}) | { cwd = process.cwd(), expectedManager = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validatePackageManagerContract } from \"@kungfu-tech/buildchain/core\";` | `packages/core/package-manager.js:18` |\n| `validatePublishEvidence` | function: function validatePublishEvidence({ evidence, version, channel, sourceSha, releaseSha, targetRef = \"\", releaseMaterialSha = releaseSha, publishToolingSha = \"\", requiredArtifacts = [], } = {}) | { evidence, version, channel, sourceSha, releaseSha, targetRef = \"\", releaseMaterialSha = releaseSha, publishToolingSha = \"\", requiredArtifacts = [], } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validatePublishEvidence } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publish-transaction.js:674` |\n| `validateReleaseActivationReceiptSet` | function: function validateReleaseActivationReceiptSet(receiptSet, { allowShadow = true } = {}) | receiptSet, { allowShadow = true } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateReleaseActivationReceiptSet } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-activation-transaction.js:376` |\n| `validateReleaseActivationTransaction` | function: function validateReleaseActivationTransaction(transaction) | transaction | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateReleaseActivationTransaction } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-activation-transaction.js:146` |\n| `validateReleaseCandidatePassport` | function: function validateReleaseCandidatePassport({ passport, repository = \"\", targetChannel = \"\", version = \"\", sourceHeadSha = \"\", buildSummary = undefined, requirePlatforms = true, requireFamilyEvidence = false, familyEvidenceRoot = \"\", familyInitiativeId = \"\", familyAssignmentId = \"\", } = {}) | { passport, repository = \"\", targetChannel = \"\", version = \"\", sourceHeadSha = \"\", buildSummary = undefined, requirePlatforms = true, requireFamilyEvidence = false, familyEvidenceRoot = \"\", familyInitiativeId = \"\", familyAssignmentId = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateReleaseCandidatePassport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-candidate.js:404` |\n| `validateReleasePassportSchema` | function: function validateReleasePassportSchema(passport) | passport | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateReleasePassportSchema } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport-contract.js:256` |\n| `verifyArtifactPassport` | function: async function verifyArtifactPassport({ subject, cwd = process.cwd(), passportLocation = \"\", locatorConfig = \"\", repository = \"\", tag = \"\", githubReleaseBaseUrl = \"\", subjectDigest = \"\", subjectKind = \"\", npmRegistryBaseUrl = \"\", verificationEnvelope = undefined, } = {}) | { subject, cwd = process.cwd(), passportLocation = \"\", locatorConfig = \"\", repository = \"\", tag = \"\", githubReleaseBaseUrl = \"\", subjectDigest = \"\", subjectKind = \"\", npmRegistryBaseUrl = \"\", verificationEnvelope = undefined, } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyArtifactPassport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-passport.js:701` |\n| `verifyArtifactSigningResultFiles` | function: function verifyArtifactSigningResultFiles({ root, request, receipt, result, } = {}) | { root, request, receipt, result, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyArtifactSigningResultFiles } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing-result.js:193` |\n| `verifyArtifactVerificationEnvelope` | function: function verifyArtifactVerificationEnvelope({ envelope, assessmentTime = Math.floor(Date.now() / 1000), expectedEnvelopeRoot = \"\", expectedIssuer = \"\", expectedPublisher = \"\", expectedContractVersion = \"\", } = {}) | { envelope, assessmentTime = Math.floor(Date.now() / 1000), expectedEnvelopeRoot = \"\", expectedIssuer = \"\", expectedPublisher = \"\", expectedContractVersion = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyArtifactVerificationEnvelope } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-verification-envelope.js:144` |\n| `verifyBuildchainLogEvents` | function: function verifyBuildchainLogEvents({ path: filePath = \"\", events: inputEvents = undefined, minEvents = 1, allowErrors = false, requirePhases = [], requireComponents = [], requireEvents = [], } = {}) | { path: filePath = \"\", events: inputEvents = undefined, minEvents = 1, allowErrors = false, requirePhases = [], requireComponents = [], requireEvents = [], } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyBuildchainLogEvents } from \"@kungfu-tech/buildchain/core\";` | `packages/core/logging.js:230` |\n| `verifyBuildFacts` | function: function verifyBuildFacts({ cwd = process.cwd(), fact, factPath = \"\" } = {}) | { cwd = process.cwd(), fact, factPath = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyBuildFacts } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:423` |\n| `verifyCacheEvidenceSet` | function: function verifyCacheEvidenceSet(receipt) | receipt | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyCacheEvidenceSet } from \"@kungfu-tech/buildchain/core\";` | `packages/core/cache-evidence.js:273` |\n| `verifyCacheOperationReceipt` | function: function verifyCacheOperationReceipt(receipt) | receipt | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyCacheOperationReceipt } from \"@kungfu-tech/buildchain/core\";` | `packages/core/cache-evidence.js:226` |\n| `verifyDetachedArtifactSignature` | function: function verifyDetachedArtifactSignature({ request, envelope, publicKey, } = {}) | { request, envelope, publicKey, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyDetachedArtifactSignature } from \"@kungfu-tech/buildchain/core\";` | `packages/core/detached-artifact-signature.js:82` |\n| `verifyGitHubArtifactAttestationEvidence` | function: function verifyGitHubArtifactAttestationEvidence({ artifactPath, platformManifestPath, releasePassportPath, bundlePath, evidence, verificationResults, } = {}) | { artifactPath, platformManifestPath, releasePassportPath, bundlePath, evidence, verificationResults, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyGitHubArtifactAttestationEvidence } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:563` |\n| `verifyGithubGovernanceReceipt` | function: function verifyGithubGovernanceReceipt(receipt, { expectedOrganization, expectedRepository, expectedRepositoryIdentityRoot, expectedTargetRef, expectedPolicyRoot, expectedVerifierSourceRevision, now = new Date().toISOString(), } = {}) | receipt, { expectedOrganization, expectedRepository, expectedRepositoryIdentityRoot, expectedTargetRef, expectedPolicyRoot, expectedVerifierSourceRevision, now = new Date().toISOString(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyGithubGovernanceReceipt } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:884` |\n| `verifyKfdRecord` | function: async function verifyKfdRecord(record) | record | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyKfdRecord } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:308` |\n| `verifyPortableDevCachePlan` | function: function verifyPortableDevCachePlan(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyPortableDevCachePlan } from \"@kungfu-tech/buildchain/core\";` | `packages/core/portable-dev-cache.js:211` |\n| `verifyPublicationAdmission` | function: function verifyPublicationAdmission({ admission, registry, runnerProvenance, controlPlaneAudit, publicationEvidence, expected = {}, usedNonces = [], now = new Date(), } = {}) | { admission, registry, runnerProvenance, controlPlaneAudit, publicationEvidence, expected = {}, usedNonces = [], now = new Date(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyPublicationAdmission } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:791` |\n| `verifyPublicationQualificationReceipt` | function: function verifyPublicationQualificationReceipt({ receipt, capability, gateAggregate, expected = {}, usedNonces = [], now = new Date(), } = {}) | { receipt, capability, gateAggregate, expected = {}, usedNonces = [], now = new Date(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyPublicationQualificationReceipt } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:1096` |\n| `verifyPublicationReproducibility` | function: function verifyPublicationReproducibility({ cwd = process.cwd(), sourceSha = \"\", output = DEFAULT_OUTPUT, promote = false, keepWorkspaces = false, pullToolchain = true, packageName = \"\", allowUnpinnedToolchain = false, overlayPaths = [DEFAULT_REGISTRY_INPUT_DIR, DEFAULT_REGISTRY_HYDRATION], } = {}) | { cwd = process.cwd(), sourceSha = \"\", output = DEFAULT_OUTPUT, promote = false, keepWorkspaces = false, pullToolchain = true, packageName = \"\", allowUnpinnedToolchain = false, overlayPaths = [DEFAULT_REGISTRY_INPUT_DIR, DEFAULT_REGISTRY_HYDRATION], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { verifyPublicationReproducibility } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-reproducibility.js:869` |\n| `verifyPublicationSealedBundle` | function: function verifyPublicationSealedBundle({ bundleRoot, manifest } = {}) | { bundleRoot, manifest } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyPublicationSealedBundle } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-sealed-bundle.js:124` |\n| `verifyReleasePassport` | function: async function verifyReleasePassport({ passportLocation, artifactEvidenceLocation = \"\", publishEvidenceLocation = \"\", impactLocation = \"\", agentIndexLocation = \"\", productMechanismLocation = \"\", kfdAgentHubEvidenceLocation = \"\", kfdSupportEvidenceLocation = \"\", checkedAt = nowIso(), } = {}) | { passportLocation, artifactEvidenceLocation = \"\", publishEvidenceLocation = \"\", impactLocation = \"\", agentIndexLocation = \"\", productMechanismLocation = \"\", kfdAgentHubEvidenceLocation = \"\", kfdSupportEvidenceLocation = \"\", checkedAt = nowIso(), } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyReleasePassport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:2743` |\n| `verifyReleasePropagationWork` | function: function verifyReleasePropagationWork(input) | input | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyReleasePropagationWork } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-work.js:486` |\n| `WEB_SURFACE_PRODUCTION_DECISION_CONTRACT` | constant: const WEB_SURFACE_PRODUCTION_DECISION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { WEB_SURFACE_PRODUCTION_DECISION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/web-surface-publication-candidate.js:7` |\n| `WEB_SURFACE_PUBLICATION_CANDIDATE_CONTRACT` | constant: const WEB_SURFACE_PUBLICATION_CANDIDATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { WEB_SURFACE_PUBLICATION_CANDIDATE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/web-surface-publication-candidate.js:5` |\n| `webSurfacePublicationDigest` | function: function webSurfacePublicationDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { webSurfacePublicationDigest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/web-surface-publication-candidate.js:21` |\n| `workflowFrictionMarker` | function: function workflowFrictionMarker(fingerprint) | fingerprint | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { workflowFrictionMarker } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:80` |\n| `writeBuildFacts` | function: function writeBuildFacts({ cwd = process.cwd(), fact, output = \"\" } = {}) | { cwd = process.cwd(), fact, output = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { writeBuildFacts } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:549` |\n| `writeDiagnosticsArtifact` | function: function writeDiagnosticsArtifact(filePath, diagnostics) | filePath, diagnostics | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { writeDiagnosticsArtifact } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:1459` |\n| `writeKfd2ProductClaimOutputs` | function: function writeKfd2ProductClaimOutputs(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { writeKfd2ProductClaimOutputs } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd2-product-claims.js:426` |\n| `writeKfd3SurfaceRegistry` | function: function writeKfd3SurfaceRegistry({ cwd = process.cwd(), registryPath = \"\", registry }) | { cwd = process.cwd(), registryPath = \"\", registry } | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { writeKfd3SurfaceRegistry } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd3-surface-register.js:478` |\n| `writeKungfuBuildInfoProjection` | function: function writeKungfuBuildInfoProjection({ cwd = process.cwd(), moduleFact, output } = {}) | { cwd = process.cwd(), moduleFact, output } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { writeKungfuBuildInfoProjection } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:557` |\n| `writePaperFleetUpdate` | function: function writePaperFleetUpdate(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { writePaperFleetUpdate } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-fleet.js:271` |\n| `writePaperMigration` | function: function writePaperMigration(plan) | plan | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { writePaperMigration } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:1129` |\n| `writePaperScaffold` | function: function writePaperScaffold(plan) | plan | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { writePaperScaffold } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:847` |\n| `writePublicationArtifact` | function: function writePublicationArtifact({ cwd = process.cwd(), output = \"\", passportOutput = \"\", registryOutput = \"\", registryInputs = [], sourceSha = \"\", sourceBundle = true, sourceBundlePath = \"\", generatedAt = \"\", } = {}) | { cwd = process.cwd(), output = \"\", passportOutput = \"\", registryOutput = \"\", registryInputs = [], sourceSha = \"\", sourceBundle = true, sourceBundlePath = \"\", generatedAt = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { writePublicationArtifact } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-artifact.js:598` |\n| `writeReleaseLineBootstrapVersionState` | function: function writeReleaseLineBootstrapVersionState({ cwd = process.cwd(), major, minor, sourceRef = \"\", initialVersion = \"\", runVersionStateLifecycle = true, generatedAt = \"\", } = {}) | { cwd = process.cwd(), major, minor, sourceRef = \"\", initialVersion = \"\", runVersionStateLifecycle = true, generatedAt = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { writeReleaseLineBootstrapVersionState } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-line-bootstrap.js:237` |\n| `writeReleasePropagationLock` | function: function writeReleasePropagationLock({ plan, target = \"\", cwd = process.cwd(), output = \"\" } = {}) | { plan, target = \"\", cwd = process.cwd(), output = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { writeReleasePropagationLock } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation.js:317` |\n| `writeReleaseTransaction` | function: function writeReleaseTransaction(filePath, record) | filePath, record | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { writeReleaseTransaction } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publish-transaction.js:376` |\n\n## `@kungfu-tech/buildchain/artifact-passport`\n\nTarget: `./packages/core/artifact-passport.js`. Public symbols: 10.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `ARTIFACT_PASSPORT_LOCATOR_CONTRACT` | constant: const ARTIFACT_PASSPORT_LOCATOR_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_PASSPORT_LOCATOR_CONTRACT } from \"@kungfu-tech/buildchain/artifact-passport\";` | `packages/core/artifact-passport.js:11` |\n| `ARTIFACT_PASSPORT_POINTER_CONTRACT` | constant: const ARTIFACT_PASSPORT_POINTER_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_PASSPORT_POINTER_CONTRACT } from \"@kungfu-tech/buildchain/artifact-passport\";` | `packages/core/artifact-passport.js:10` |\n| `ARTIFACT_VERIFICATION_CONTRACT` | constant: const ARTIFACT_VERIFICATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_VERIFICATION_CONTRACT } from \"@kungfu-tech/buildchain/artifact-passport\";` | `packages/core/artifact-passport.js:9` |\n| `DEFAULT_NPM_REGISTRY_BASE_URL` | constant: const DEFAULT_NPM_REGISTRY_BASE_URL | none | value | Import does not declare a throw contract. | none-on-import | `import { DEFAULT_NPM_REGISTRY_BASE_URL } from \"@kungfu-tech/buildchain/artifact-passport\";` | `packages/core/artifact-passport.js:12` |\n| `discoverArtifactPassport` | function: async function discoverArtifactPassport({ subject, cwd = process.cwd(), passportLocation = \"\", locatorConfig = \"\", repository = \"\", tag = \"\", githubReleaseBaseUrl = \"\", } = {}) | { subject, cwd = process.cwd(), passportLocation = \"\", locatorConfig = \"\", repository = \"\", tag = \"\", githubReleaseBaseUrl = \"\", } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { discoverArtifactPassport } from \"@kungfu-tech/buildchain/artifact-passport\";` | `packages/core/artifact-passport.js:499` |\n| `explainArtifactPassport` | function: async function explainArtifactPassport(options = {}) | options = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { explainArtifactPassport } from \"@kungfu-tech/buildchain/artifact-passport\";` | `packages/core/artifact-passport.js:827` |\n| `resolveArtifactSubject` | function: async function resolveArtifactSubject(subject, { cwd = process.cwd(), subjectDigest = \"\", subjectKind = \"\", npmRegistryBaseUrl = \"\", } = {}) | subject, { cwd = process.cwd(), subjectDigest = \"\", subjectKind = \"\", npmRegistryBaseUrl = \"\", } = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveArtifactSubject } from \"@kungfu-tech/buildchain/artifact-passport\";` | `packages/core/artifact-passport.js:368` |\n| `sha512IntegrityBuffer` | function: function sha512IntegrityBuffer(buffer) | buffer | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { sha512IntegrityBuffer } from \"@kungfu-tech/buildchain/artifact-passport\";` | `packages/core/artifact-passport.js:34` |\n| `sha512IntegrityFile` | function: function sha512IntegrityFile(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sha512IntegrityFile } from \"@kungfu-tech/buildchain/artifact-passport\";` | `packages/core/artifact-passport.js:38` |\n| `verifyArtifactPassport` | function: async function verifyArtifactPassport({ subject, cwd = process.cwd(), passportLocation = \"\", locatorConfig = \"\", repository = \"\", tag = \"\", githubReleaseBaseUrl = \"\", subjectDigest = \"\", subjectKind = \"\", npmRegistryBaseUrl = \"\", verificationEnvelope = undefined, } = {}) | { subject, cwd = process.cwd(), passportLocation = \"\", locatorConfig = \"\", repository = \"\", tag = \"\", githubReleaseBaseUrl = \"\", subjectDigest = \"\", subjectKind = \"\", npmRegistryBaseUrl = \"\", verificationEnvelope = undefined, } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyArtifactPassport } from \"@kungfu-tech/buildchain/artifact-passport\";` | `packages/core/artifact-passport.js:701` |\n\n## `@kungfu-tech/buildchain/artifact-verification-envelope`\n\nTarget: `./packages/core/artifact-verification-envelope.js`. Public symbols: 7.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `ARTIFACT_VERIFICATION_ENVELOPE_CHECK_CONTRACT` | constant: const ARTIFACT_VERIFICATION_ENVELOPE_CHECK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_VERIFICATION_ENVELOPE_CHECK_CONTRACT } from \"@kungfu-tech/buildchain/artifact-verification-envelope\";` | `packages/core/artifact-verification-envelope.js:5` |\n| `ARTIFACT_VERIFICATION_ENVELOPE_CONTRACT` | constant: const ARTIFACT_VERIFICATION_ENVELOPE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_VERIFICATION_ENVELOPE_CONTRACT } from \"@kungfu-tech/buildchain/artifact-verification-envelope\";` | `packages/core/artifact-verification-envelope.js:3` |\n| `artifactVerificationEnvelopeDigest` | function: function artifactVerificationEnvelopeDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { artifactVerificationEnvelopeDigest } from \"@kungfu-tech/buildchain/artifact-verification-envelope\";` | `packages/core/artifact-verification-envelope.js:50` |\n| `KFX_ADMISSION_INPUTS_CONTRACT` | constant: const KFX_ADMISSION_INPUTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFX_ADMISSION_INPUTS_CONTRACT } from \"@kungfu-tech/buildchain/artifact-verification-envelope\";` | `packages/core/artifact-verification-envelope.js:7` |\n| `projectArtifactVerificationEnvelopeToKfx` | function: function projectArtifactVerificationEnvelopeToKfx({ envelope, assessmentTime = Math.floor(Date.now() / 1000), expectedEnvelopeRoot = \"\", expectedIssuer = \"\", expectedPublisher = \"\", expectedContractVersion = \"\", } = {}) | { envelope, assessmentTime = Math.floor(Date.now() / 1000), expectedEnvelopeRoot = \"\", expectedIssuer = \"\", expectedPublisher = \"\", expectedContractVersion = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { projectArtifactVerificationEnvelopeToKfx } from \"@kungfu-tech/buildchain/artifact-verification-envelope\";` | `packages/core/artifact-verification-envelope.js:359` |\n| `sealArtifactVerificationReport` | function: function sealArtifactVerificationReport({ report, bindings, kfdAssessment, issuedAt, expiresAt, revocation, } = {}) | { report, bindings, kfdAssessment, issuedAt, expiresAt, revocation, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sealArtifactVerificationReport } from \"@kungfu-tech/buildchain/artifact-verification-envelope\";` | `packages/core/artifact-verification-envelope.js:314` |\n| `verifyArtifactVerificationEnvelope` | function: function verifyArtifactVerificationEnvelope({ envelope, assessmentTime = Math.floor(Date.now() / 1000), expectedEnvelopeRoot = \"\", expectedIssuer = \"\", expectedPublisher = \"\", expectedContractVersion = \"\", } = {}) | { envelope, assessmentTime = Math.floor(Date.now() / 1000), expectedEnvelopeRoot = \"\", expectedIssuer = \"\", expectedPublisher = \"\", expectedContractVersion = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyArtifactVerificationEnvelope } from \"@kungfu-tech/buildchain/artifact-verification-envelope\";` | `packages/core/artifact-verification-envelope.js:144` |\n\n## `@kungfu-tech/buildchain/github-artifact-attestation`\n\nTarget: `./packages/core/github-artifact-attestation.js`. Public symbols: 18.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `createGitHubArtifactAttestationEvidence` | function: function createGitHubArtifactAttestationEvidence({ preparation, attestationId, attestationUrl, bundlePath, workflow = {}, } = {}) | { preparation, attestationId, attestationUrl, bundlePath, workflow = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createGitHubArtifactAttestationEvidence } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:474` |\n| `createGitHubArtifactAttestationPolicy` | function: function createGitHubArtifactAttestationPolicy(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGitHubArtifactAttestationPolicy } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:204` |\n| `createGitHubArtifactAttestationVerificationPlan` | function: function createGitHubArtifactAttestationVerificationPlan({ artifactPath, bundlePath, evidence, } = {}) | { artifactPath, bundlePath, evidence, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGitHubArtifactAttestationVerificationPlan } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:524` |\n| `GITHUB_ARTIFACT_ATTESTATION_EVIDENCE_CONTRACT` | constant: const GITHUB_ARTIFACT_ATTESTATION_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_EVIDENCE_CONTRACT } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:9` |\n| `GITHUB_ARTIFACT_ATTESTATION_POLICY_CONTRACT` | constant: const GITHUB_ARTIFACT_ATTESTATION_POLICY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_POLICY_CONTRACT } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:5` |\n| `GITHUB_ARTIFACT_ATTESTATION_PREDICATE_CONTRACT` | constant: const GITHUB_ARTIFACT_ATTESTATION_PREDICATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_PREDICATE_CONTRACT } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:7` |\n| `GITHUB_ARTIFACT_ATTESTATION_PREDICATE_TYPE` | constant: const GITHUB_ARTIFACT_ATTESTATION_PREDICATE_TYPE | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_PREDICATE_TYPE } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:13` |\n| `GITHUB_ARTIFACT_ATTESTATION_VERIFICATION_CONTRACT` | constant: const GITHUB_ARTIFACT_ATTESTATION_VERIFICATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_VERIFICATION_CONTRACT } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:11` |\n| `GITHUB_ARTIFACT_ATTESTATION_WORKFLOW` | constant: const GITHUB_ARTIFACT_ATTESTATION_WORKFLOW | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_WORKFLOW } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:15` |\n| `githubArtifactAttestationRequiredPermissions` | function: function githubArtifactAttestationRequiredPermissions() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { githubArtifactAttestationRequiredPermissions } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:640` |\n| `githubArtifactAttestationSemanticRoot` | function: function githubArtifactAttestationSemanticRoot(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { githubArtifactAttestationSemanticRoot } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:91` |\n| `githubArtifactAttestationSha256Buffer` | function: function githubArtifactAttestationSha256Buffer(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { githubArtifactAttestationSha256Buffer } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:83` |\n| `githubArtifactAttestationSha256File` | function: function githubArtifactAttestationSha256File(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { githubArtifactAttestationSha256File } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:87` |\n| `normalizeGitHubArtifactAttestationPolicy` | function: function normalizeGitHubArtifactAttestationPolicy(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeGitHubArtifactAttestationPolicy } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:158` |\n| `prepareGitHubArtifactAttestation` | function: function prepareGitHubArtifactAttestation({ subjectPath, platformManifestPath, releasePassportPath, policy, expectedBuildchainRef = \"\", expectedCallerRepository = \"\", expectedSourceSha = \"\", } = {}) | { subjectPath, platformManifestPath, releasePassportPath, policy, expectedBuildchainRef = \"\", expectedCallerRepository = \"\", expectedSourceSha = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { prepareGitHubArtifactAttestation } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:250` |\n| `stableJson` | function: function stableJson(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { stableJson } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:72` |\n| `stageGitHubArtifactAttestationInputs` | function: function stageGitHubArtifactAttestationInputs({ policy, subjectRoots = [], platformManifestPaths = [], releasePassportPath, outputDir = \".buildchain/github-artifact-attestation-input\", } = {}) | { policy, subjectRoots = [], platformManifestPaths = [], releasePassportPath, outputDir = \".buildchain/github-artifact-attestation-input\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { stageGitHubArtifactAttestationInputs } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:389` |\n| `verifyGitHubArtifactAttestationEvidence` | function: function verifyGitHubArtifactAttestationEvidence({ artifactPath, platformManifestPath, releasePassportPath, bundlePath, evidence, verificationResults, } = {}) | { artifactPath, platformManifestPath, releasePassportPath, bundlePath, evidence, verificationResults, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyGitHubArtifactAttestationEvidence } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:563` |\n\n## `@kungfu-tech/buildchain/artifact-signing`\n\nTarget: `./packages/core/artifact-signing.js`. Public symbols: 10.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `ARTIFACT_SIGNING_AUTHORITY_CONTRACT` | constant: const ARTIFACT_SIGNING_AUTHORITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_SIGNING_AUTHORITY_CONTRACT } from \"@kungfu-tech/buildchain/artifact-signing\";` | `packages/core/artifact-signing.js:7` |\n| `ARTIFACT_SIGNING_RECEIPT_CONTRACT` | constant: const ARTIFACT_SIGNING_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_SIGNING_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/artifact-signing\";` | `packages/core/artifact-signing.js:5` |\n| `ARTIFACT_SIGNING_REQUEST_CONTRACT` | constant: const ARTIFACT_SIGNING_REQUEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_SIGNING_REQUEST_CONTRACT } from \"@kungfu-tech/buildchain/artifact-signing\";` | `packages/core/artifact-signing.js:3` |\n| `artifactSigningDigest` | function: function artifactSigningDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { artifactSigningDigest } from \"@kungfu-tech/buildchain/artifact-signing\";` | `packages/core/artifact-signing.js:60` |\n| `createArtifactSigningReceipt` | function: function createArtifactSigningReceipt({ request, status = \"passed\", authority = {}, result = {}, signatures = [], reason = \"\", } = {}) | { request, status = \"passed\", authority = {}, result = {}, signatures = [], reason = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createArtifactSigningReceipt } from \"@kungfu-tech/buildchain/artifact-signing\";` | `packages/core/artifact-signing.js:313` |\n| `createArtifactSigningRequest` | function: function createArtifactSigningRequest({ source = {}, runtime = {}, artifact = {}, signature = {}, delivery = {}, } = {}) | { source = {}, runtime = {}, artifact = {}, signature = {}, delivery = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createArtifactSigningRequest } from \"@kungfu-tech/buildchain/artifact-signing\";` | `packages/core/artifact-signing.js:167` |\n| `listArtifactSigningProfiles` | function: function listArtifactSigningProfiles() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { listArtifactSigningProfiles } from \"@kungfu-tech/buildchain/artifact-signing\";` | `packages/core/artifact-signing.js:103` |\n| `resolveArtifactSigningProfile` | function: function resolveArtifactSigningProfile({ profile = \"auto\", platform = \"\", artifactKind = \"binary\", } = {}) | { profile = \"auto\", platform = \"\", artifactKind = \"binary\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveArtifactSigningProfile } from \"@kungfu-tech/buildchain/artifact-signing\";` | `packages/core/artifact-signing.js:111` |\n| `validateArtifactSigningReceipt` | function: function validateArtifactSigningReceipt(receipt, { request } = {}) | receipt, { request } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateArtifactSigningReceipt } from \"@kungfu-tech/buildchain/artifact-signing\";` | `packages/core/artifact-signing.js:374` |\n| `validateArtifactSigningRequest` | function: function validateArtifactSigningRequest(request) | request | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateArtifactSigningRequest } from \"@kungfu-tech/buildchain/artifact-signing\";` | `packages/core/artifact-signing.js:291` |\n\n## `@kungfu-tech/buildchain/artifact-signing-result`\n\nTarget: `./packages/core/artifact-signing-result.js`. Public symbols: 5.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `ARTIFACT_SIGNING_RESULT_CONTRACT` | constant: const ARTIFACT_SIGNING_RESULT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_SIGNING_RESULT_CONTRACT } from \"@kungfu-tech/buildchain/artifact-signing-result\";` | `packages/core/artifact-signing-result.js:12` |\n| `artifactSigningEvidenceDigest` | function: function artifactSigningEvidenceDigest(evidence = []) | evidence = [] | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { artifactSigningEvidenceDigest } from \"@kungfu-tech/buildchain/artifact-signing-result\";` | `packages/core/artifact-signing-result.js:58` |\n| `createArtifactSigningResult` | function: function createArtifactSigningResult({ request, receipt, receiptPath = \"receipt.json\", payload = {}, evidence = [], verification = {}, } = {}) | { request, receipt, receiptPath = \"receipt.json\", payload = {}, evidence = [], verification = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createArtifactSigningResult } from \"@kungfu-tech/buildchain/artifact-signing-result\";` | `packages/core/artifact-signing-result.js:68` |\n| `validateArtifactSigningResult` | function: function validateArtifactSigningResult(result, { request, receipt } = {}) | result, { request, receipt } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateArtifactSigningResult } from \"@kungfu-tech/buildchain/artifact-signing-result\";` | `packages/core/artifact-signing-result.js:147` |\n| `verifyArtifactSigningResultFiles` | function: function verifyArtifactSigningResultFiles({ root, request, receipt, result, } = {}) | { root, request, receipt, result, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyArtifactSigningResultFiles } from \"@kungfu-tech/buildchain/artifact-signing-result\";` | `packages/core/artifact-signing-result.js:193` |\n\n## `@kungfu-tech/buildchain/detached-artifact-signature`\n\nTarget: `./packages/core/detached-artifact-signature.js`. Public symbols: 3.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `DETACHED_ARTIFACT_SIGNATURE_CONTRACT` | constant: const DETACHED_ARTIFACT_SIGNATURE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { DETACHED_ARTIFACT_SIGNATURE_CONTRACT } from \"@kungfu-tech/buildchain/detached-artifact-signature\";` | `packages/core/detached-artifact-signature.js:10` |\n| `signDetachedArtifactRequest` | function: function signDetachedArtifactRequest({ request, privateKey, keyId, authority = {}, } = {}) | { request, privateKey, keyId, authority = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { signDetachedArtifactRequest } from \"@kungfu-tech/buildchain/detached-artifact-signature\";` | `packages/core/detached-artifact-signature.js:36` |\n| `verifyDetachedArtifactSignature` | function: function verifyDetachedArtifactSignature({ request, envelope, publicKey, } = {}) | { request, envelope, publicKey, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyDetachedArtifactSignature } from \"@kungfu-tech/buildchain/detached-artifact-signature\";` | `packages/core/detached-artifact-signature.js:82` |\n\n## `@kungfu-tech/buildchain/anchored-version-material`\n\nTarget: `./packages/core/anchored-version-material.js`. Public symbols: 2.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `ANCHORED_VERSION_MATERIAL_CONTRACT` | constant: const ANCHORED_VERSION_MATERIAL_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ANCHORED_VERSION_MATERIAL_CONTRACT } from \"@kungfu-tech/buildchain/anchored-version-material\";` | `packages/core/anchored-version-material.js:15` |\n| `createAnchoredVersionMaterialEvidence` | function: function createAnchoredVersionMaterialEvidence({ cwd = process.cwd(), targetChannel = \"\", targetRef = \"\", alphaRef = \"\", releaseRef = \"HEAD\", runLifecycle = true, } = {}) | { cwd = process.cwd(), targetChannel = \"\", targetRef = \"\", alphaRef = \"\", releaseRef = \"HEAD\", runLifecycle = true, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createAnchoredVersionMaterialEvidence } from \"@kungfu-tech/buildchain/anchored-version-material\";` | `packages/core/anchored-version-material.js:118` |\n\n## `@kungfu-tech/buildchain/buildchain-contract`\n\nTarget: `./packages/core/buildchain-contract.js`. Public symbols: 12.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `BUILDCHAIN_CONTRACT_LOCK` | constant: const BUILDCHAIN_CONTRACT_LOCK | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTRACT_LOCK } from \"@kungfu-tech/buildchain/buildchain-contract\";` | `packages/core/buildchain-contract.js:8` |\n| `BUILDCHAIN_RUNTIME_CONTRACT_WORLD` | constant: const BUILDCHAIN_RUNTIME_CONTRACT_WORLD | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_RUNTIME_CONTRACT_WORLD } from \"@kungfu-tech/buildchain/buildchain-contract\";` | `packages/core/buildchain-contract.js:7` |\n| `contractSummary` | function: function contractSummary(contractWorld, runtimeRef = \"\", runtimeSha = \"\") | contractWorld, runtimeRef = \"\", runtimeSha = \"\" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { contractSummary } from \"@kungfu-tech/buildchain/buildchain-contract\";` | `packages/core/buildchain-contract.js:945` |\n| `createBuildchainContractLock` | function: function createBuildchainContractLock({ buildchainRef = \"v3\", resolvedSha = \"\", contractWorld, compatibilityPolicy = DEFAULT_POLICY, acceptedAt = new Date().toISOString(), } = {}) | { buildchainRef = \"v3\", resolvedSha = \"\", contractWorld, compatibilityPolicy = DEFAULT_POLICY, acceptedAt = new Date().toISOString(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createBuildchainContractLock } from \"@kungfu-tech/buildchain/buildchain-contract\";` | `packages/core/buildchain-contract.js:787` |\n| `createBuildchainContractWorld` | function: function createBuildchainContractWorld({ root = process.cwd(), packageJson = undefined, controllerRegistry = undefined, } = {}) | { root = process.cwd(), packageJson = undefined, controllerRegistry = undefined, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainContractWorld } from \"@kungfu-tech/buildchain/buildchain-contract\";` | `packages/core/buildchain-contract.js:110` |\n| `evaluateBuildchainContractLock` | function: function evaluateBuildchainContractLock({ lock, current, runtimeRef = \"\", runtimeSha = \"\", runtimeClass = \"\", compatibilityPolicy = \"\", } = {}) | { lock, current, runtimeRef = \"\", runtimeSha = \"\", runtimeClass = \"\", compatibilityPolicy = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { evaluateBuildchainContractLock } from \"@kungfu-tech/buildchain/buildchain-contract\";` | `packages/core/buildchain-contract.js:853` |\n| `finalizeBuildchainContractWorld` | function: function finalizeBuildchainContractWorld(contractWorld) | contractWorld | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { finalizeBuildchainContractWorld } from \"@kungfu-tech/buildchain/buildchain-contract\";` | `packages/core/buildchain-contract.js:762` |\n| `readBuildchainContractLock` | function: function readBuildchainContractLock(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readBuildchainContractLock } from \"@kungfu-tech/buildchain/buildchain-contract\";` | `packages/core/buildchain-contract.js:838` |\n| `readBuildchainContractWorld` | function: function readBuildchainContractWorld(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readBuildchainContractWorld } from \"@kungfu-tech/buildchain/buildchain-contract\";` | `packages/core/buildchain-contract.js:818` |\n| `renderBuildchainContractDriftIssueBody` | function: function renderBuildchainContractDriftIssueBody({ repository = \"\", workflow = \"\", runUrl = \"\", lockPath = \"\", evaluation, } = {}) | { repository = \"\", workflow = \"\", runUrl = \"\", lockPath = \"\", evaluation, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { renderBuildchainContractDriftIssueBody } from \"@kungfu-tech/buildchain/buildchain-contract\";` | `packages/core/buildchain-contract.js:957` |\n| `sha256File` | function: function sha256File(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { sha256File } from \"@kungfu-tech/buildchain/buildchain-contract\";` | `packages/core/buildchain-contract.js:34` |\n| `sha256Json` | function: function sha256Json(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { sha256Json } from \"@kungfu-tech/buildchain/buildchain-contract\";` | `packages/core/buildchain-contract.js:30` |\n\n## `@kungfu-tech/buildchain/candidate-timeline`\n\nTarget: `./packages/core/candidate-timeline.js`. Public symbols: 5.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `BUILDCHAIN_CANDIDATE_TIMELINE_CONTRACT` | constant: const BUILDCHAIN_CANDIDATE_TIMELINE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CANDIDATE_TIMELINE_CONTRACT } from \"@kungfu-tech/buildchain/candidate-timeline\";` | `packages/core/candidate-timeline.js:1` |\n| `BUILDCHAIN_CANDIDATE_TIMELINE_EVENT_CONTRACT` | constant: const BUILDCHAIN_CANDIDATE_TIMELINE_EVENT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CANDIDATE_TIMELINE_EVENT_CONTRACT } from \"@kungfu-tech/buildchain/candidate-timeline\";` | `packages/core/candidate-timeline.js:3` |\n| `createCandidateTimeline` | function: function createCandidateTimeline({ candidate = {}, events = [], generatedAt, } = {}) | { candidate = {}, events = [], generatedAt, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createCandidateTimeline } from \"@kungfu-tech/buildchain/candidate-timeline\";` | `packages/core/candidate-timeline.js:381` |\n| `formatCandidateTimelineReport` | function: function formatCandidateTimelineReport(timeline) | timeline | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { formatCandidateTimelineReport } from \"@kungfu-tech/buildchain/candidate-timeline\";` | `packages/core/candidate-timeline.js:438` |\n| `normalizeCandidateTimelineEvent` | function: function normalizeCandidateTimelineEvent(input = {}) | input = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeCandidateTimelineEvent } from \"@kungfu-tech/buildchain/candidate-timeline\";` | `packages/core/candidate-timeline.js:74` |\n\n## `@kungfu-tech/buildchain/channel-candidate`\n\nTarget: `./packages/core/channel-candidate.js`. Public symbols: 3.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `CHANNEL_CANDIDATE_DECISION_SCHEMA` | constant: const CHANNEL_CANDIDATE_DECISION_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { CHANNEL_CANDIDATE_DECISION_SCHEMA } from \"@kungfu-tech/buildchain/channel-candidate\";` | `packages/core/channel-candidate.js:5` |\n| `channelCandidateSourceLockRef` | function: function channelCandidateSourceLockRef(targetBranch, sourceSha) | targetBranch, sourceSha | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { channelCandidateSourceLockRef } from \"@kungfu-tech/buildchain/channel-candidate\";` | `packages/core/channel-candidate.js:84` |\n| `decideChannelCandidate` | function: function decideChannelCandidate(input) | input | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { decideChannelCandidate } from \"@kungfu-tech/buildchain/channel-candidate\";` | `packages/core/channel-candidate.js:90` |\n\n## `@kungfu-tech/buildchain/cache-evidence`\n\nTarget: `./packages/core/cache-evidence.js`. Public symbols: 7.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `BUILDCHAIN_CACHE_EVIDENCE_SET_CONTRACT` | constant: const BUILDCHAIN_CACHE_EVIDENCE_SET_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CACHE_EVIDENCE_SET_CONTRACT } from \"@kungfu-tech/buildchain/cache-evidence\";` | `packages/core/cache-evidence.js:5` |\n| `BUILDCHAIN_CACHE_OPERATION_RECEIPT_CONTRACT` | constant: const BUILDCHAIN_CACHE_OPERATION_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CACHE_OPERATION_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/cache-evidence\";` | `packages/core/cache-evidence.js:3` |\n| `cacheEvidenceDigest` | function: function cacheEvidenceDigest(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { cacheEvidenceDigest } from \"@kungfu-tech/buildchain/cache-evidence\";` | `packages/core/cache-evidence.js:48` |\n| `createCacheEvidenceSet` | function: function createCacheEvidenceSet({ repository, sourceCommit, sourceTree = \"\", runtimeCommit = \"\", platform, operations = [], } = {}) | { repository, sourceCommit, sourceTree = \"\", runtimeCommit = \"\", platform, operations = [], } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createCacheEvidenceSet } from \"@kungfu-tech/buildchain/cache-evidence\";` | `packages/core/cache-evidence.js:244` |\n| `createCacheOperationReceipt` | function: function createCacheOperationReceipt({ operationId, operation, provider, producer, platform, cacheKey, cacheRoot, outcome, bindings = {}, metrics, evidence, } = {}) | { operationId, operation, provider, producer, platform, cacheKey, cacheRoot, outcome, bindings = {}, metrics, evidence, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createCacheOperationReceipt } from \"@kungfu-tech/buildchain/cache-evidence\";` | `packages/core/cache-evidence.js:169` |\n| `verifyCacheEvidenceSet` | function: function verifyCacheEvidenceSet(receipt) | receipt | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyCacheEvidenceSet } from \"@kungfu-tech/buildchain/cache-evidence\";` | `packages/core/cache-evidence.js:273` |\n| `verifyCacheOperationReceipt` | function: function verifyCacheOperationReceipt(receipt) | receipt | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyCacheOperationReceipt } from \"@kungfu-tech/buildchain/cache-evidence\";` | `packages/core/cache-evidence.js:226` |\n\n## `@kungfu-tech/buildchain/controller-evidence`\n\nTarget: `./packages/core/controller-evidence.js`. Public symbols: 14.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `aggregateControllerReceipts` | function: function aggregateControllerReceipts({ plans = [], receipts = [] } = {}) | { plans = [], receipts = [] } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { aggregateControllerReceipts } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:448` |\n| `BUILDCHAIN_CONTROLLER_AGGREGATE_CONTRACT` | constant: const BUILDCHAIN_CONTROLLER_AGGREGATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTROLLER_AGGREGATE_CONTRACT } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:6` |\n| `BUILDCHAIN_CONTROLLER_DESCRIPTOR_CONTRACT` | constant: const BUILDCHAIN_CONTROLLER_DESCRIPTOR_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTROLLER_DESCRIPTOR_CONTRACT } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:4` |\n| `BUILDCHAIN_CONTROLLER_EVIDENCE_CONTRACT` | constant: const BUILDCHAIN_CONTROLLER_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTROLLER_EVIDENCE_CONTRACT } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:3` |\n| `BUILDCHAIN_CONTROLLER_REGISTRY_CONTRACT` | constant: const BUILDCHAIN_CONTROLLER_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTROLLER_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:5` |\n| `controllerEvidenceDigest` | function: function controllerEvidenceDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { controllerEvidenceDigest } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:150` |\n| `createControllerPlan` | function: function createControllerPlan({ descriptor, source = {}, runtime = {}, inputs = {} } = {}) | { descriptor, source = {}, runtime = {}, inputs = {} } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createControllerPlan } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:286` |\n| `createControllerReceipt` | function: function createControllerReceipt({ plan, stages = [], evidence = [], reason = undefined, artifact = \"\" } = {}) | { plan, stages = [], evidence = [], reason = undefined, artifact = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createControllerReceipt } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:362` |\n| `createControllerReceiptReference` | function: function createControllerReceiptReference(receipt) | receipt | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createControllerReceiptReference } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:490` |\n| `createControllerRegistry` | function: function createControllerRegistry({ workflows = [] } = {}) | { workflows = [] } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createControllerRegistry } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:196` |\n| `normalizeControllerReceiptReferences` | function: function normalizeControllerReceiptReferences({ receipts = [], references = [], expectedSourceSha = \"\", acceptedSourceShas = [], expectedRuntimeSha = \"\", requirePassed = false, } = {}) | { receipts = [], references = [], expectedSourceSha = \"\", acceptedSourceShas = [], expectedRuntimeSha = \"\", requirePassed = false, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeControllerReceiptReferences } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:531` |\n| `validateControllerPlan` | function: function validateControllerPlan(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateControllerPlan } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:324` |\n| `validateControllerReceipt` | function: function validateControllerReceipt(receipt, { plan = undefined, expectedSourceSha = \"\", expectedRuntimeSha = \"\", expectedPlanDigest = \"\", } = {}) | receipt, { plan = undefined, expectedSourceSha = \"\", expectedRuntimeSha = \"\", expectedPlanDigest = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateControllerReceipt } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:422` |\n| `validateControllerReceiptReference` | function: function validateControllerReceiptReference(reference, { expectedSourceSha = \"\", acceptedSourceShas = [], expectedRuntimeSha = \"\", requirePassed = false, } = {}) | reference, { expectedSourceSha = \"\", acceptedSourceShas = [], expectedRuntimeSha = \"\", requirePassed = false, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateControllerReceiptReference } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:504` |\n\n## `@kungfu-tech/buildchain/diagnostics`\n\nTarget: `./packages/core/diagnostics.js`. Public symbols: 30.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `BUILDCHAIN_ANCHORED_PACKAGE_RELEASE_VALIDATION_CONTRACT` | constant: const BUILDCHAIN_ANCHORED_PACKAGE_RELEASE_VALIDATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_ANCHORED_PACKAGE_RELEASE_VALIDATION_CONTRACT } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:31` |\n| `BUILDCHAIN_DIAGNOSTICS_CONTRACT` | constant: const BUILDCHAIN_DIAGNOSTICS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_DIAGNOSTICS_CONTRACT } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:28` |\n| `BUILDCHAIN_DIAGNOSTICS_MANIFEST_CONTRACT` | constant: const BUILDCHAIN_DIAGNOSTICS_MANIFEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_DIAGNOSTICS_MANIFEST_CONTRACT } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:33` |\n| `BUILDCHAIN_DIAGNOSTICS_SUMMARY_CONTRACT` | constant: const BUILDCHAIN_DIAGNOSTICS_SUMMARY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_DIAGNOSTICS_SUMMARY_CONTRACT } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:35` |\n| `BUILDCHAIN_LIFECYCLE_OBSERVABILITY_CONTRACT` | constant: const BUILDCHAIN_LIFECYCLE_OBSERVABILITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LIFECYCLE_OBSERVABILITY_CONTRACT } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:29` |\n| `BUILDCHAIN_LOCKED_SOURCE_CHECKOUT_CONTRACT` | constant: const BUILDCHAIN_LOCKED_SOURCE_CHECKOUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LOCKED_SOURCE_CHECKOUT_CONTRACT } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:41` |\n| `BUILDCHAIN_PROCESS_SAMPLE_REPORT_CONTRACT` | constant: const BUILDCHAIN_PROCESS_SAMPLE_REPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_PROCESS_SAMPLE_REPORT_CONTRACT } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:37` |\n| `BUILDCHAIN_PROCESS_SAMPLE_SUMMARY_CONTRACT` | constant: const BUILDCHAIN_PROCESS_SAMPLE_SUMMARY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_PROCESS_SAMPLE_SUMMARY_CONTRACT } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:39` |\n| `classifyProcessCommand` | function: function classifyProcessCommand(command = \"\") | command = \"\" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { classifyProcessCommand } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:1085` |\n| `collectBuildchainDiagnostics` | function: function collectBuildchainDiagnostics({ cwd = process.cwd(), artifactPaths = [] } = {}) | { cwd = process.cwd(), artifactPaths = [] } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectBuildchainDiagnostics } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:248` |\n| `collectCacheDiagnostics` | function: function collectCacheDiagnostics({ cwd = process.cwd(), cacheDirs = [], runCommand = defaultDiagnosticCommandRunner } = {}) | { cwd = process.cwd(), cacheDirs = [], runCommand = defaultDiagnosticCommandRunner } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectCacheDiagnostics } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:922` |\n| `collectCompilerCacheDiagnostics` | function: function collectCompilerCacheDiagnostics({ cwd = process.cwd(), runCommand = defaultDiagnosticCommandRunner, env = process.env, } = {}) | { cwd = process.cwd(), runCommand = defaultDiagnosticCommandRunner, env = process.env, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectCompilerCacheDiagnostics } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:573` |\n| `collectGitDiagnostics` | function: function collectGitDiagnostics({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectGitDiagnostics } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:944` |\n| `collectNativeDiagnostics` | function: function collectNativeDiagnostics({ cwd = process.cwd(), profile = undefined, runCommand = defaultDiagnosticCommandRunner, } = {}) | { cwd = process.cwd(), profile = undefined, runCommand = defaultDiagnosticCommandRunner, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectNativeDiagnostics } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:295` |\n| `collectProcessTreeSnapshot` | function: function collectProcessTreeSnapshot({ rootPid = process.pid, cwd = process.cwd(), platform = process.platform, runCommand = defaultDiagnosticCommandRunner, } = {}) | { rootPid = process.pid, cwd = process.cwd(), platform = process.platform, runCommand = defaultDiagnosticCommandRunner, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectProcessTreeSnapshot } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:1029` |\n| `collectRunnerDiagnostics` | function: function collectRunnerDiagnostics() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectRunnerDiagnostics } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:468` |\n| `collectToolDiagnostics` | function: function collectToolDiagnostics({ cwd = process.cwd(), tools = [\"node\", \"pnpm\", \"npm\", \"git\", \"cmake\", \"ninja\", \"ccache\", \"sccache\"] } = {}) | { cwd = process.cwd(), tools = [\"node\", \"pnpm\", \"npm\", \"git\", \"cmake\", \"ninja\", \"ccache\", \"sccache\"] } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectToolDiagnostics } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:495` |\n| `createDiagnosticsArtifact` | function: function createDiagnosticsArtifact({ cwd = process.cwd(), logPath = \"\", artifactPaths = [], cacheDirs = [], lifecycleObservability = undefined, processSamples = [], processSummary = undefined, requestedParallelism = 0, sourceCheckout = undefined, compilerCachePreparation = undefined, links = {}, } = {}) | { cwd = process.cwd(), logPath = \"\", artifactPaths = [], cacheDirs = [], lifecycleObservability = undefined, processSamples = [], processSummary = undefined, requestedParallelism = 0, sourceCheckout = undefined, compilerCachePreparation = undefined, links = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createDiagnosticsArtifact } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:1408` |\n| `createStructuredCacheEvidence` | function: function createStructuredCacheEvidence({ sourceCheckout, compilerCaches, compilerCachePreparation, platform, env = process.env, }) | { sourceCheckout, compilerCaches, compilerCachePreparation, platform, env = process.env, } | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createStructuredCacheEvidence } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:722` |\n| `detectRequestedParallelism` | function: function detectRequestedParallelism({ command = \"\", args = [], env = process.env, } = {}) | { command = \"\", args = [], env = process.env, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { detectRequestedParallelism } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:1188` |\n| `detectRequestedParallelismFromProcessSamples` | function: function detectRequestedParallelismFromProcessSamples(samples = []) | samples = [] | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { detectRequestedParallelismFromProcessSamples } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:1223` |\n| `formatDiagnosticsSummaryTable` | function: function formatDiagnosticsSummaryTable(summary = {}) | summary = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { formatDiagnosticsSummaryTable } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:1786` |\n| `readDiagnosticsArtifact` | function: function readDiagnosticsArtifact(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readDiagnosticsArtifact } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:1468` |\n| `redactDiagnosticsValue` | function: function redactDiagnosticsValue(key, value, pattern = DEFAULT_SECRET_KEY_PATTERN) | key, value, pattern = DEFAULT_SECRET_KEY_PATTERN | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { redactDiagnosticsValue } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:953` |\n| `startProcessSampler` | function: function startProcessSampler({ rootPid = process.pid, intervalMs = 15000, label = \"\", command = \"\", args = [], env = process.env, requestedParallelism = 0, onSample = () => undefined, cwd = process.cwd(), } = {}) | { rootPid = process.pid, intervalMs = 15000, label = \"\", command = \"\", args = [], env = process.env, requestedParallelism = 0, onSample = () => undefined, cwd = process.cwd(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { startProcessSampler } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:1362` |\n| `summarizeDiagnosticsArtifacts` | function: function summarizeDiagnosticsArtifacts(inputs = []) | inputs = [] | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { summarizeDiagnosticsArtifacts } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:1824` |\n| `summarizeLifecycleObservability` | function: function summarizeLifecycleObservability({ events = [], logPath = \"\", artifactScanDurationMs = 0, artifactUploadDurationMs = 0, totalBytes = 0, fileCount = 0, } = {}) | { events = [], logPath = \"\", artifactScanDurationMs = 0, artifactUploadDurationMs = 0, totalBytes = 0, fileCount = 0, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { summarizeLifecycleObservability } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:219` |\n| `summarizeProcessSamples` | function: function summarizeProcessSamples({ samples = [], requestedParallelism = 0, command = \"\", args = [], env = process.env, activeCpuThreshold = 0.1, } = {}) | { samples = [], requestedParallelism = 0, command = \"\", args = [], env = process.env, activeCpuThreshold = 0.1, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { summarizeProcessSamples } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:1254` |\n| `validateAnchoredPackageRelease` | function: function validateAnchoredPackageRelease({ cwd = process.cwd(), requireManifest = true, requirePackageSetOrder = \"platforms-first-main-last\", requireTrustedPublishing = true, requireLifecycleStages = [\"install\", \"build\", \"verify\", \"publish\"], requirePublishGateSourceLock = false, publishSource = undefined, env = process.env, } = {}) | { cwd = process.cwd(), requireManifest = true, requirePackageSetOrder = \"platforms-first-main-last\", requireTrustedPublishing = true, requireLifecycleStages = [\"install\", \"build\", \"verify\", \"publish\"], requirePublishGateSourceLock = false, publishSource = undefined, env = process.env, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateAnchoredPackageRelease } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:325` |\n| `writeDiagnosticsArtifact` | function: function writeDiagnosticsArtifact(filePath, diagnostics) | filePath, diagnostics | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { writeDiagnosticsArtifact } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:1459` |\n\n## `@kungfu-tech/buildchain/homebrew`\n\nTarget: `./packages/core/homebrew.js`. Public symbols: 7.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `checkHomebrewTap` | function: async function checkHomebrewTap({ cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", } = {}) | { cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkHomebrewTap } from \"@kungfu-tech/buildchain/homebrew\";` | `packages/core/homebrew.js:335` |\n| `collectHomebrewTapFacts` | function: async function collectHomebrewTapFacts({ cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", } = {}) | { cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectHomebrewTapFacts } from \"@kungfu-tech/buildchain/homebrew\";` | `packages/core/homebrew.js:223` |\n| `HOMEBREW_TAP_CHECK_CONTRACT` | constant: const HOMEBREW_TAP_CHECK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { HOMEBREW_TAP_CHECK_CONTRACT } from \"@kungfu-tech/buildchain/homebrew\";` | `packages/core/homebrew.js:6` |\n| `HOMEBREW_TAP_FACTS_CONTRACT` | constant: const HOMEBREW_TAP_FACTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { HOMEBREW_TAP_FACTS_CONTRACT } from \"@kungfu-tech/buildchain/homebrew\";` | `packages/core/homebrew.js:5` |\n| `HOMEBREW_TAP_MANIFEST_CONTRACT` | constant: const HOMEBREW_TAP_MANIFEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { HOMEBREW_TAP_MANIFEST_CONTRACT } from \"@kungfu-tech/buildchain/homebrew\";` | `packages/core/homebrew.js:7` |\n| `renderHomebrewFormula` | function: function renderHomebrewFormula(facts) | facts | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { renderHomebrewFormula } from \"@kungfu-tech/buildchain/homebrew\";` | `packages/core/homebrew.js:290` |\n| `updateHomebrewTap` | function: async function updateHomebrewTap({ cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", write = true, } = {}) | { cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", write = true, } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { updateHomebrewTap } from \"@kungfu-tech/buildchain/homebrew\";` | `packages/core/homebrew.js:390` |\n\n## `@kungfu-tech/buildchain/issue-reporting`\n\nTarget: `./packages/core/issue-reporting.js`. Public symbols: 17.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `BUILDCHAIN_CONSUMER_ISSUE_CONTRACT` | constant: const BUILDCHAIN_CONSUMER_ISSUE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONSUMER_ISSUE_CONTRACT } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:4` |\n| `BUILDCHAIN_WORKFLOW_FRICTION_ISSUE_CONTRACT` | constant: const BUILDCHAIN_WORKFLOW_FRICTION_ISSUE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_WORKFLOW_FRICTION_ISSUE_CONTRACT } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:5` |\n| `buildConsumerIssueReport` | function: function buildConsumerIssueReport(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { buildConsumerIssueReport } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:104` |\n| `buildWorkflowFrictionIssueReport` | function: function buildWorkflowFrictionIssueReport(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { buildWorkflowFrictionIssueReport } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:199` |\n| `computeConsumerIssueFingerprint` | function: function computeConsumerIssueFingerprint(fields = {}) | fields = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { computeConsumerIssueFingerprint } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:64` |\n| `consumerIssueMarker` | function: function consumerIssueMarker(fingerprint) | fingerprint | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { consumerIssueMarker } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:76` |\n| `createGitHubIssueRequest` | function: function createGitHubIssueRequest({ token, apiUrl = process.env.GITHUB_API_URL \\|\\| \"https://api.github.com\", fetchImpl = globalThis.fetch, retryDelaysMs = DEFAULT_RETRY_DELAYS_MS, } = {}) | { token, apiUrl = process.env.GITHUB_API_URL \\|\\| \"https://api.github.com\", fetchImpl = globalThis.fetch, retryDelaysMs = DEFAULT_RETRY_DELAYS_MS, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGitHubIssueRequest } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:393` |\n| `DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY` | constant: const DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY | none | value | Import does not declare a throw contract. | none-on-import | `import { DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:6` |\n| `GitHubIssueRequestError` | class: class GitHubIssueRequestError | none | GitHubIssueRequestError | Construction and method errors follow the linked source implementation. | class-dependent | `import { GitHubIssueRequestError } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:23` |\n| `normalizeIssueRepository` | function: function normalizeIssueRepository(repository = DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY) | repository = DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeIssueRepository } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:33` |\n| `parseIssueLabels` | function: function parseIssueLabels(input = DEFAULT_LABELS) | input = DEFAULT_LABELS | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { parseIssueLabels } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:41` |\n| `readOptionalIssueBodyFile` | function: function readOptionalIssueBodyFile(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readOptionalIssueBodyFile } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:385` |\n| `redactIssueText` | function: function redactIssueText(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { redactIssueText } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:51` |\n| `reportBuildchainIssue` | function: async function reportBuildchainIssue(options = {}) | options = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { reportBuildchainIssue } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:292` |\n| `reportWorkflowFrictionIssue` | function: async function reportWorkflowFrictionIssue(options = {}) | options = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { reportWorkflowFrictionIssue } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:378` |\n| `truncateUtf8` | function: function truncateUtf8(text, maxBytes = DEFAULT_MAX_BODY_BYTES) | text, maxBytes = DEFAULT_MAX_BODY_BYTES | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { truncateUtf8 } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:84` |\n| `workflowFrictionMarker` | function: function workflowFrictionMarker(fingerprint) | fingerprint | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { workflowFrictionMarker } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:80` |\n\n## `@kungfu-tech/buildchain/kfd`\n\nTarget: `./packages/core/kfd.js`. Public symbols: 17.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `buildchainKfdClaims` | constant: const buildchainKfdClaims | none | value | Import does not declare a throw contract. | none-on-import | `import { buildchainKfdClaims } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:896` |\n| `checkKfdUpstreamFacts` | function: function checkKfdUpstreamFacts(aggregate = {}) | aggregate = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkKfdUpstreamFacts } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:798` |\n| `collectKfdAggregate` | function: function collectKfdAggregate({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectKfdAggregate } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:868` |\n| `collectKfdStatus` | function: function collectKfdStatus({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectKfdStatus } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:902` |\n| `collectKfdUpstreamFacts` | function: function collectKfdUpstreamFacts({ cwd = process.cwd(), components = undefined, includeOwn = true } = {}) | { cwd = process.cwd(), components = undefined, includeOwn = true } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectKfdUpstreamFacts } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:689` |\n| `discoverKfdStandards` | function: function discoverKfdStandards() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { discoverKfdStandards } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:464` |\n| `kfd1` | constant: const kfd1 | none | value | Import does not declare a throw contract. | none-on-import | `import { kfd1 } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:546` |\n| `kfd2` | constant: const kfd2 | none | value | Import does not declare a throw contract. | none-on-import | `import { kfd2 } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:561` |\n| `kfd3` | constant: const kfd3 | none | value | Import does not declare a throw contract. | none-on-import | `import { kfd3 } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:663` |\n| `kfd4` | constant: const kfd4 | none | value | Import does not declare a throw contract. | none-on-import | `import { kfd4 } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:681` |\n| `layout` | constant: const layout | none | value | Import does not declare a throw contract. | none-on-import | `import { layout } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:905` |\n| `listKfdSchemas` | function: function listKfdSchemas({ standard = \"\" } = {}) | { standard = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { listKfdSchemas } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:492` |\n| `listKfdUpstreamRoles` | function: function listKfdUpstreamRoles() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { listKfdUpstreamRoles } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:771` |\n| `normalizeKfdStandardId` | function: function normalizeKfdStandardId(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfdStandardId } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:455` |\n| `readKfdSchema` | function: function readKfdSchema({ standard, schema = \"\" } = {}) | { standard, schema = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readKfdSchema } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:520` |\n| `schemas` | constant: const schemas | none | value | Import does not declare a throw contract. | none-on-import | `import { schemas } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:495` |\n| `upstream` | constant: const upstream | none | value | Import does not declare a throw contract. | none-on-import | `import { upstream } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:300` |\n\n## `@kungfu-tech/buildchain/kfd-product-gates`\n\nTarget: `./packages/core/kfd-product-gates.js`. Public symbols: 14.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `createKfdSupportProjection` | function: function createKfdSupportProjection({ matrix, matrixRoot = \"\", gateResults = [], authorityPath = \".buildchain/kfd/support-matrix.json\", expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {}) | { matrix, matrixRoot = \"\", gateResults = [], authorityPath = \".buildchain/kfd/support-matrix.json\", expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfdSupportProjection } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:716` |\n| `evaluateKfdProductGate` | function: async function evaluateKfdProductGate({ cwd = process.cwd(), input, expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {}) | { cwd = process.cwd(), input, expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluateKfdProductGate } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:465` |\n| `KFD_PRODUCT_GATE_CONTRACT` | constant: const KFD_PRODUCT_GATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_PRODUCT_GATE_CONTRACT } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:11` |\n| `KFD_PRODUCT_GATE_INPUT_CONTRACT` | constant: const KFD_PRODUCT_GATE_INPUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_PRODUCT_GATE_INPUT_CONTRACT } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:9` |\n| `KFD_PRODUCT_GATE_INPUT_SCHEMA` | constant: const KFD_PRODUCT_GATE_INPUT_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_PRODUCT_GATE_INPUT_SCHEMA } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:55` |\n| `KFD_PRODUCT_GATE_INPUT_SCHEMA_ID` | constant: const KFD_PRODUCT_GATE_INPUT_SCHEMA_ID | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_PRODUCT_GATE_INPUT_SCHEMA_ID } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:15` |\n| `KFD_SUPPORT_PROJECTION_CONTRACT` | constant: const KFD_SUPPORT_PROJECTION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_SUPPORT_PROJECTION_CONTRACT } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:13` |\n| `KFD_SUPPORT_PROJECTION_SCHEMA` | constant: const KFD_SUPPORT_PROJECTION_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_SUPPORT_PROJECTION_SCHEMA } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:130` |\n| `KFD_SUPPORT_PROJECTION_SCHEMA_ID` | constant: const KFD_SUPPORT_PROJECTION_SCHEMA_ID | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_SUPPORT_PROJECTION_SCHEMA_ID } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:17` |\n| `kfdProductGateDigest` | function: function kfdProductGateDigest(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { kfdProductGateDigest } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:188` |\n| `kfdProductGates` | constant: const kfdProductGates | none | value | Import does not declare a throw contract. | none-on-import | `import { kfdProductGates } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:859` |\n| `validateKfdProductGateResult` | function: function validateKfdProductGateResult(result, { expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {}) | result, { expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfdProductGateResult } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:565` |\n| `validateKfdSupportProjection` | function: function validateKfdSupportProjection(projection, { expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {}) | projection, { expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfdSupportProjection } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:796` |\n| `verifyKfdRecord` | function: async function verifyKfdRecord(record) | record | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyKfdRecord } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:308` |\n\n## `@kungfu-tech/buildchain/kfd-agent-hub`\n\nTarget: `./packages/core/kfd-agent-hub.js`. Public symbols: 10.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `explainKfdAgentHub` | function: function explainKfdAgentHub({ cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = \"\" } = {}) | { cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { explainKfdAgentHub } from \"@kungfu-tech/buildchain/kfd-agent-hub\";` | `packages/core/kfd-agent-hub.js:470` |\n| `initKfdAgentHub` | function: function initKfdAgentHub({ cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, write = false, force = false } = {}) | { cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, write = false, force = false } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { initKfdAgentHub } from \"@kungfu-tech/buildchain/kfd-agent-hub\";` | `packages/core/kfd-agent-hub.js:363` |\n| `inspectKfdAgentHub` | function: function inspectKfdAgentHub({ cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = \"\" } = {}) | { cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { inspectKfdAgentHub } from \"@kungfu-tech/buildchain/kfd-agent-hub\";` | `packages/core/kfd-agent-hub.js:384` |\n| `KFD_AGENT_HUB_ADOPTION_CONTRACT` | constant: const KFD_AGENT_HUB_ADOPTION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_ADOPTION_CONTRACT } from \"@kungfu-tech/buildchain/kfd-agent-hub\";` | `packages/core/kfd-agent-hub.js:9` |\n| `KFD_AGENT_HUB_ADOPTION_SCHEMA` | constant: const KFD_AGENT_HUB_ADOPTION_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_ADOPTION_SCHEMA } from \"@kungfu-tech/buildchain/kfd-agent-hub\";` | `packages/core/kfd-agent-hub.js:12` |\n| `KFD_AGENT_HUB_DECLARATION` | constant: const KFD_AGENT_HUB_DECLARATION | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_DECLARATION } from \"@kungfu-tech/buildchain/kfd-agent-hub\";` | `packages/core/kfd-agent-hub.js:7` |\n| `KFD_AGENT_HUB_LOCK_CONTRACT` | constant: const KFD_AGENT_HUB_LOCK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_LOCK_CONTRACT } from \"@kungfu-tech/buildchain/kfd-agent-hub\";` | `packages/core/kfd-agent-hub.js:10` |\n| `KFD_AGENT_HUB_OUTPUT_DIR` | constant: const KFD_AGENT_HUB_OUTPUT_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_OUTPUT_DIR } from \"@kungfu-tech/buildchain/kfd-agent-hub\";` | `packages/core/kfd-agent-hub.js:8` |\n| `KFD_AGENT_HUB_VERIFICATION_CONTRACT` | constant: const KFD_AGENT_HUB_VERIFICATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_VERIFICATION_CONTRACT } from \"@kungfu-tech/buildchain/kfd-agent-hub\";` | `packages/core/kfd-agent-hub.js:11` |\n| `testKfdAgentHub` | function: function testKfdAgentHub({ cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, outputDir = KFD_AGENT_HUB_OUTPUT_DIR, kfdRoot = \"\", run = defaultRun } = {}) | { cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, outputDir = KFD_AGENT_HUB_OUTPUT_DIR, kfdRoot = \"\", run = defaultRun } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { testKfdAgentHub } from \"@kungfu-tech/buildchain/kfd-agent-hub\";` | `packages/core/kfd-agent-hub.js:399` |\n\n## `@kungfu-tech/buildchain/buildchain-layout`\n\nTarget: `./packages/core/buildchain-layout.js`. Public symbols: 41.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `BUILDCHAIN_CONFIG_PATH` | constant: const BUILDCHAIN_CONFIG_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONFIG_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:7` |\n| `BUILDCHAIN_CONTRACT_LOCK_PATH` | constant: const BUILDCHAIN_CONTRACT_LOCK_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTRACT_LOCK_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:9` |\n| `BUILDCHAIN_DIR` | constant: const BUILDCHAIN_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_DIR } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:4` |\n| `BUILDCHAIN_GENERATED_DIRS` | constant: const BUILDCHAIN_GENERATED_DIRS | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_GENERATED_DIRS } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:36` |\n| `BUILDCHAIN_KFD_ROOT` | constant: const BUILDCHAIN_KFD_ROOT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD_ROOT } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:11` |\n| `BUILDCHAIN_KFD1_CONTRACT_WORLD_WITNESS_PATH` | constant: const BUILDCHAIN_KFD1_CONTRACT_WORLD_WITNESS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD1_CONTRACT_WORLD_WITNESS_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:16` |\n| `BUILDCHAIN_KFD1_DIR` | constant: const BUILDCHAIN_KFD1_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD1_DIR } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:12` |\n| `BUILDCHAIN_KFD1_RELEASE_GATE_PATH` | constant: const BUILDCHAIN_KFD1_RELEASE_GATE_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD1_RELEASE_GATE_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:17` |\n| `BUILDCHAIN_KFD1_VERIFY_RESULT_PATH` | constant: const BUILDCHAIN_KFD1_VERIFY_RESULT_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD1_VERIFY_RESULT_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:18` |\n| `BUILDCHAIN_KFD2_CLAIM_ARGS_PATH` | constant: const BUILDCHAIN_KFD2_CLAIM_ARGS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_CLAIM_ARGS_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:21` |\n| `BUILDCHAIN_KFD2_CLAIMS_DIR` | constant: const BUILDCHAIN_KFD2_CLAIMS_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_CLAIMS_DIR } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:22` |\n| `BUILDCHAIN_KFD2_DIR` | constant: const BUILDCHAIN_KFD2_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_DIR } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:13` |\n| `BUILDCHAIN_KFD2_REGISTRY_PATH` | constant: const BUILDCHAIN_KFD2_REGISTRY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_REGISTRY_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:19` |\n| `BUILDCHAIN_KFD2_RELEASE_CLAIMS_PATH` | constant: const BUILDCHAIN_KFD2_RELEASE_CLAIMS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_RELEASE_CLAIMS_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:20` |\n| `BUILDCHAIN_KFD3_ARTIFACT_WITNESS_PATH` | constant: const BUILDCHAIN_KFD3_ARTIFACT_WITNESS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_ARTIFACT_WITNESS_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:26` |\n| `BUILDCHAIN_KFD3_CAPABILITY_QUERY_PATH` | constant: const BUILDCHAIN_KFD3_CAPABILITY_QUERY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_CAPABILITY_QUERY_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:27` |\n| `BUILDCHAIN_KFD3_COLLABORATION_INTERFACE_PATH` | constant: const BUILDCHAIN_KFD3_COLLABORATION_INTERFACE_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_COLLABORATION_INTERFACE_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:24` |\n| `BUILDCHAIN_KFD3_DIR` | constant: const BUILDCHAIN_KFD3_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_DIR } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:14` |\n| `BUILDCHAIN_KFD3_PREBUILD_WITNESS_PATH` | constant: const BUILDCHAIN_KFD3_PREBUILD_WITNESS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_PREBUILD_WITNESS_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:25` |\n| `BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH` | constant: const BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:23` |\n| `BUILDCHAIN_KFD4_DIR` | constant: const BUILDCHAIN_KFD4_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD4_DIR } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:15` |\n| `BUILDCHAIN_LAYOUT_DISCOVERY_CONTRACT` | constant: const BUILDCHAIN_LAYOUT_DISCOVERY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LAYOUT_DISCOVERY_CONTRACT } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:6` |\n| `BUILDCHAIN_RELEASE_PASSPORT_PATH` | constant: const BUILDCHAIN_RELEASE_PASSPORT_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_RELEASE_PASSPORT_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:33` |\n| `BUILDCHAIN_VERSION_PIN_PATH` | constant: const BUILDCHAIN_VERSION_PIN_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_VERSION_PIN_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:5` |\n| `createBuildchainLayoutDiscovery` | function: function createBuildchainLayoutDiscovery({ cwd = process.cwd(), buildchainVersion = \"\", } = {}) | { cwd = process.cwd(), buildchainVersion = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainLayoutDiscovery } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:99` |\n| `discoverBuildchainRepoFiles` | function: function discoverBuildchainRepoFiles(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { discoverBuildchainRepoFiles } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:143` |\n| `firstExistingRepoPath` | function: function firstExistingRepoPath(cwd, candidates = []) | cwd, candidates = [] | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { firstExistingRepoPath } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:58` |\n| `LEGACY_BUILDCHAIN_CONFIG_PATH` | constant: const LEGACY_BUILDCHAIN_CONFIG_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_CONFIG_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:8` |\n| `LEGACY_BUILDCHAIN_CONTRACT_LOCK_PATH` | constant: const LEGACY_BUILDCHAIN_CONTRACT_LOCK_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_CONTRACT_LOCK_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:10` |\n| `LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH` | constant: const LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:28` |\n| `LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATHS` | constant: const LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATHS | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATHS } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:29` |\n| `LEGACY_BUILDCHAIN_RELEASE_PASSPORT_PATH` | constant: const LEGACY_BUILDCHAIN_RELEASE_PASSPORT_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_RELEASE_PASSPORT_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:34` |\n| `migrateBuildchainLayout` | function: function migrateBuildchainLayout({ cwd = process.cwd(), write = false, force = false } = {}) | { cwd = process.cwd(), write = false, force = false } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { migrateBuildchainLayout } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:287` |\n| `planBuildchainLayoutMigration` | function: function planBuildchainLayoutMigration({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { planBuildchainLayoutMigration } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:265` |\n| `repoPath` | function: function repoPath(cwd, relativePath) | cwd, relativePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { repoPath } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:54` |\n| `resolveBuildchainConfigPath` | function: function resolveBuildchainConfigPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveBuildchainConfigPath } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:67` |\n| `resolveBuildchainContractLockPath` | function: function resolveBuildchainContractLockPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveBuildchainContractLockPath } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:74` |\n| `resolveKfd2ProductClaimsRegistryPath` | function: function resolveKfd2ProductClaimsRegistryPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveKfd2ProductClaimsRegistryPath } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:81` |\n| `resolveKfd3SurfaceRegistryPath` | function: function resolveKfd3SurfaceRegistryPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveKfd3SurfaceRegistryPath } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:85` |\n| `resolveReleasePassportPath` | function: function resolveReleasePassportPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveReleasePassportPath } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:92` |\n| `toPosixPath` | function: function toPosixPath(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { toPosixPath } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:50` |\n\n## `@kungfu-tech/buildchain/release-line-bootstrap`\n\nTarget: `./packages/core/release-line-bootstrap.js`. Public symbols: 2.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `planReleaseLineBootstrap` | function: function planReleaseLineBootstrap({ cwd = process.cwd(), major, minor, sourceRef = \"\", initialVersion = \"\", requiredStatusCheck = \"check\", setDefault = true, createAlphaPr = true, approvalCount = 1, bootstrapBranch = \"\", } = {}) | { cwd = process.cwd(), major, minor, sourceRef = \"\", initialVersion = \"\", requiredStatusCheck = \"check\", setDefault = true, createAlphaPr = true, approvalCount = 1, bootstrapBranch = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { planReleaseLineBootstrap } from \"@kungfu-tech/buildchain/release-line-bootstrap\";` | `packages/core/release-line-bootstrap.js:140` |\n| `writeReleaseLineBootstrapVersionState` | function: function writeReleaseLineBootstrapVersionState({ cwd = process.cwd(), major, minor, sourceRef = \"\", initialVersion = \"\", runVersionStateLifecycle = true, generatedAt = \"\", } = {}) | { cwd = process.cwd(), major, minor, sourceRef = \"\", initialVersion = \"\", runVersionStateLifecycle = true, generatedAt = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { writeReleaseLineBootstrapVersionState } from \"@kungfu-tech/buildchain/release-line-bootstrap\";` | `packages/core/release-line-bootstrap.js:237` |\n\n## `@kungfu-tech/buildchain/readme-badges`\n\nTarget: `./packages/core/readme-badges.js`. Public symbols: 17.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `BADGE_BUNDLE_DEFAULT_CLAIMS` | constant: const BADGE_BUNDLE_DEFAULT_CLAIMS | none | value | Import does not declare a throw contract. | none-on-import | `import { BADGE_BUNDLE_DEFAULT_CLAIMS } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:17` |\n| `BADGE_BUNDLE_FACTS_CONTRACT` | constant: const BADGE_BUNDLE_FACTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BADGE_BUNDLE_FACTS_CONTRACT } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:13` |\n| `checkBadgeBundleBlock` | function: function checkBadgeBundleBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkBadgeBundleBlock } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:867` |\n| `checkReadmeBadgeBlock` | function: function checkReadmeBadgeBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkReadmeBadgeBlock } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:848` |\n| `collectBadgeBundleFacts` | function: async function collectBadgeBundleFacts({ cwd = process.cwd(), claims = undefined } = {}) | { cwd = process.cwd(), claims = undefined } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectBadgeBundleFacts } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:790` |\n| `collectReadmeBadgeFacts` | function: async function collectReadmeBadgeFacts({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectReadmeBadgeFacts } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:700` |\n| `createKfdBadgeSpecsFromStandards` | function: function createKfdBadgeSpecsFromStandards(standardsMetadata) | standardsMetadata | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfdBadgeSpecsFromStandards } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:126` |\n| `createReadmeBadgeEndpointRegistry` | function: function createReadmeBadgeEndpointRegistry({ kfdSpecs = undefined, kfdStandards = undefined } = {}) | { kfdSpecs = undefined, kfdStandards = undefined } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { createReadmeBadgeEndpointRegistry } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:133` |\n| `README_BADGE_BLOCK_END` | constant: const README_BADGE_BLOCK_END | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_BLOCK_END } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:15` |\n| `README_BADGE_BLOCK_START` | constant: const README_BADGE_BLOCK_START | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_BLOCK_START } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:14` |\n| `README_BADGE_FACTS_CONTRACT` | constant: const README_BADGE_FACTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_FACTS_CONTRACT } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:12` |\n| `README_BADGE_HOSTED_BASE_URL` | constant: const README_BADGE_HOSTED_BASE_URL | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_HOSTED_BASE_URL } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:16` |\n| `readReadme` | function: function readReadme({ cwd = process.cwd(), readmePath = \"README.md\" } = {}) | { cwd = process.cwd(), readmePath = \"README.md\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readReadme } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:891` |\n| `renderBadgeBundleBlock` | function: function renderBadgeBundleBlock(facts) | facts | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { renderBadgeBundleBlock } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:840` |\n| `renderReadmeBadgeBlock` | function: function renderReadmeBadgeBlock(facts) | facts | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { renderReadmeBadgeBlock } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:836` |\n| `updateBadgeBundleBlock` | function: function updateBadgeBundleBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { updateBadgeBundleBlock } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:887` |\n| `updateReadmeBadgeBlock` | function: function updateReadmeBadgeBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { updateReadmeBadgeBlock } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:874` |\n\n## `@kungfu-tech/buildchain/public-surface-audit`\n\nTarget: `./packages/core/public-surface-audit.js`. Public symbols: 8.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `assertPublicSurfaceReverseAudit` | function: function assertPublicSurfaceReverseAudit(report) | report | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { assertPublicSurfaceReverseAudit } from \"@kungfu-tech/buildchain/public-surface-audit\";` | `packages/core/public-surface-audit.js:261` |\n| `BUILDCHAIN_PUBLIC_SURFACE_AUDIT_CONTRACT` | constant: const BUILDCHAIN_PUBLIC_SURFACE_AUDIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_PUBLIC_SURFACE_AUDIT_CONTRACT } from \"@kungfu-tech/buildchain/public-surface-audit\";` | `packages/core/public-surface-audit.js:12` |\n| `collectPublicSurfaceReverseAudit` | function: function collectPublicSurfaceReverseAudit({ root = process.cwd(), cliRegistry: suppliedCliRegistry = undefined, workflowRegistry: suppliedWorkflowRegistry = undefined, pageRegistry: suppliedPageRegistry = undefined, } = {}) | { root = process.cwd(), cliRegistry: suppliedCliRegistry = undefined, workflowRegistry: suppliedWorkflowRegistry = undefined, pageRegistry: suppliedPageRegistry = undefined, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectPublicSurfaceReverseAudit } from \"@kungfu-tech/buildchain/public-surface-audit\";` | `packages/core/public-surface-audit.js:161` |\n| `enumerateActionInputs` | function: function enumerateActionInputs({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateActionInputs } from \"@kungfu-tech/buildchain/public-surface-audit\";` | `packages/core/public-surface-audit.js:91` |\n| `enumerateCliCommandsFromBin` | function: function enumerateCliCommandsFromBin({ root = process.cwd(), binPath = \"bin/buildchain.mjs\", } = {}) | { root = process.cwd(), binPath = \"bin/buildchain.mjs\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateCliCommandsFromBin } from \"@kungfu-tech/buildchain/public-surface-audit\";` | `packages/core/public-surface-cli.js:93` |\n| `enumerateDocCommandRefs` | function: function enumerateDocCommandRefs({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateDocCommandRefs } from \"@kungfu-tech/buildchain/public-surface-audit\";` | `packages/core/public-surface-audit.js:115` |\n| `enumerateSitePages` | function: function enumerateSitePages({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateSitePages } from \"@kungfu-tech/buildchain/public-surface-audit\";` | `packages/core/public-surface-audit.js:106` |\n| `enumerateWorkflowInputs` | function: function enumerateWorkflowInputs({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateWorkflowInputs } from \"@kungfu-tech/buildchain/public-surface-audit\";` | `packages/core/public-surface-audit.js:74` |\n\n## `@kungfu-tech/buildchain/logging`\n\nTarget: `./packages/core/logging.js`. Public symbols: 13.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `appendBuildchainLogEvent` | function: function appendBuildchainLogEvent(filePath, event) | filePath, event | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { appendBuildchainLogEvent } from \"@kungfu-tech/buildchain/logging\";` | `packages/core/logging.js:67` |\n| `BUILDCHAIN_CONTROL_PLANE_SUMMARY_CONTRACT` | constant: const BUILDCHAIN_CONTROL_PLANE_SUMMARY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTROL_PLANE_SUMMARY_CONTRACT } from \"@kungfu-tech/buildchain/logging\";` | `packages/core/logging.js:8` |\n| `BUILDCHAIN_LOG_EVENT_CONTRACT` | constant: const BUILDCHAIN_LOG_EVENT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LOG_EVENT_CONTRACT } from \"@kungfu-tech/buildchain/logging\";` | `packages/core/logging.js:6` |\n| `BUILDCHAIN_LOG_SUMMARY_CONTRACT` | constant: const BUILDCHAIN_LOG_SUMMARY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LOG_SUMMARY_CONTRACT } from \"@kungfu-tech/buildchain/logging\";` | `packages/core/logging.js:7` |\n| `createBuildchainLogger` | function: function createBuildchainLogger(options = {}) | options = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { createBuildchainLogger } from \"@kungfu-tech/buildchain/logging\";` | `packages/core/logging.js:300` |\n| `defaultBuildchainLogPath` | function: function defaultBuildchainLogPath({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { defaultBuildchainLogPath } from \"@kungfu-tech/buildchain/logging\";` | `packages/core/logging.js:41` |\n| `normalizeBuildchainLogEvent` | function: function normalizeBuildchainLogEvent(input = {}, defaults = {}) | input = {}, defaults = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { normalizeBuildchainLogEvent } from \"@kungfu-tech/buildchain/logging\";` | `packages/core/logging.js:45` |\n| `readBuildchainLogEvents` | function: function readBuildchainLogEvents(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readBuildchainLogEvents } from \"@kungfu-tech/buildchain/logging\";` | `packages/core/logging.js:75` |\n| `recordBuildchainControlPlaneOutcome` | function: function recordBuildchainControlPlaneOutcome({ domain, action = \"\", outcome = \"\", reason = \"\", attributes = {}, } = {}, options = {}) | { domain, action = \"\", outcome = \"\", reason = \"\", attributes = {}, } = {}, options = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { recordBuildchainControlPlaneOutcome } from \"@kungfu-tech/buildchain/logging\";` | `packages/core/logging.js:160` |\n| `redactBuildchainLogAttributes` | function: function redactBuildchainLogAttributes(attributes = {}) | attributes = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { redactBuildchainLogAttributes } from \"@kungfu-tech/buildchain/logging\";` | `packages/core/logging.js:33` |\n| `summarizeBuildchainControlPlaneEvents` | function: function summarizeBuildchainControlPlaneEvents(input = {}) | input = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { summarizeBuildchainControlPlaneEvents } from \"@kungfu-tech/buildchain/logging\";` | `packages/core/logging.js:115` |\n| `summarizeBuildchainLogEvents` | function: function summarizeBuildchainLogEvents(input = {}) | input = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { summarizeBuildchainLogEvents } from \"@kungfu-tech/buildchain/logging\";` | `packages/core/logging.js:192` |\n| `verifyBuildchainLogEvents` | function: function verifyBuildchainLogEvents({ path: filePath = \"\", events: inputEvents = undefined, minEvents = 1, allowErrors = false, requirePhases = [], requireComponents = [], requireEvents = [], } = {}) | { path: filePath = \"\", events: inputEvents = undefined, minEvents = 1, allowErrors = false, requirePhases = [], requireComponents = [], requireEvents = [], } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyBuildchainLogEvents } from \"@kungfu-tech/buildchain/logging\";` | `packages/core/logging.js:230` |\n\n## `@kungfu-tech/buildchain/portable-dev-cache`\n\nTarget: `./packages/core/portable-dev-cache.js`. Public symbols: 3.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `createPortableDevCachePlan` | function: function createPortableDevCachePlan(manifest) | manifest | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPortableDevCachePlan } from \"@kungfu-tech/buildchain/portable-dev-cache\";` | `packages/core/portable-dev-cache.js:172` |\n| `createPortableDevCacheReceipt` | function: function createPortableDevCacheReceipt({ plan, matchedKey = \"\", cacheHit = \"\", validationStatus = \"pass\", validationReason = \"\", coldFallbackStatus = \"not-run\", }) | { plan, matchedKey = \"\", cacheHit = \"\", validationStatus = \"pass\", validationReason = \"\", coldFallbackStatus = \"not-run\", } | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPortableDevCacheReceipt } from \"@kungfu-tech/buildchain/portable-dev-cache\";` | `packages/core/portable-dev-cache.js:226` |\n| `verifyPortableDevCachePlan` | function: function verifyPortableDevCachePlan(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyPortableDevCachePlan } from \"@kungfu-tech/buildchain/portable-dev-cache\";` | `packages/core/portable-dev-cache.js:211` |\n\n## `@kungfu-tech/buildchain/publication-artifact`\n\nTarget: `./packages/core/publication-artifact.js`. Public symbols: 7.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `collectPublicationArtifact` | function: function collectPublicationArtifact({ cwd = process.cwd(), sourceSha = \"\", sourceBundle = true, sourceBundlePath = \"\", generatedAt = \"\", manifestPath = \"\", passportPath = \"\", } = {}) | { cwd = process.cwd(), sourceSha = \"\", sourceBundle = true, sourceBundlePath = \"\", generatedAt = \"\", manifestPath = \"\", passportPath = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { collectPublicationArtifact } from \"@kungfu-tech/buildchain/publication-artifact\";` | `packages/core/publication-artifact.js:271` |\n| `createPublicationSourceBundle` | function: function createPublicationSourceBundle({ cwd = process.cwd(), sourcePaths = [], output = \".buildchain/publication/source.tar.gz\", } = {}) | { cwd = process.cwd(), sourcePaths = [], output = \".buildchain/publication/source.tar.gz\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write, subprocess | `import { createPublicationSourceBundle } from \"@kungfu-tech/buildchain/publication-artifact\";` | `packages/core/publication-artifact.js:249` |\n| `PUBLICATION_ARTIFACT_ARCHIVE_CONTRACT` | constant: const PUBLICATION_ARTIFACT_ARCHIVE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_ARCHIVE_CONTRACT } from \"@kungfu-tech/buildchain/publication-artifact\";` | `packages/core/publication-artifact.js:9` |\n| `PUBLICATION_ARTIFACT_MANIFEST_CONTRACT` | constant: const PUBLICATION_ARTIFACT_MANIFEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_MANIFEST_CONTRACT } from \"@kungfu-tech/buildchain/publication-artifact\";` | `packages/core/publication-artifact.js:7` |\n| `PUBLICATION_ARTIFACT_PASSPORT_CONTRACT` | constant: const PUBLICATION_ARTIFACT_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_PASSPORT_CONTRACT } from \"@kungfu-tech/buildchain/publication-artifact\";` | `packages/core/publication-artifact.js:8` |\n| `PUBLICATION_ARTIFACT_REGISTRY_CONTRACT` | constant: const PUBLICATION_ARTIFACT_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain/publication-artifact\";` | `packages/core/publication-artifact.js:10` |\n| `writePublicationArtifact` | function: function writePublicationArtifact({ cwd = process.cwd(), output = \"\", passportOutput = \"\", registryOutput = \"\", registryInputs = [], sourceSha = \"\", sourceBundle = true, sourceBundlePath = \"\", generatedAt = \"\", } = {}) | { cwd = process.cwd(), output = \"\", passportOutput = \"\", registryOutput = \"\", registryInputs = [], sourceSha = \"\", sourceBundle = true, sourceBundlePath = \"\", generatedAt = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { writePublicationArtifact } from \"@kungfu-tech/buildchain/publication-artifact\";` | `packages/core/publication-artifact.js:598` |\n\n## `@kungfu-tech/buildchain/publication-package`\n\nTarget: `./packages/core/publication-package.js`. Public symbols: 3.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `collectPublicationPackageFacts` | function: function collectPublicationPackageFacts({ cwd = process.cwd(), packageName = \"\", outputDir = \".buildchain/publication/npm-package\", } = {}) | { cwd = process.cwd(), packageName = \"\", outputDir = \".buildchain/publication/npm-package\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { collectPublicationPackageFacts } from \"@kungfu-tech/buildchain/publication-package\";` | `packages/core/publication-package.js:74` |\n| `preparePublicationNpmPackage` | function: function preparePublicationNpmPackage({ cwd = process.cwd(), outputDir = \".buildchain/publication/npm-package\", packageName = \"\", } = {}) | { cwd = process.cwd(), outputDir = \".buildchain/publication/npm-package\", packageName = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { preparePublicationNpmPackage } from \"@kungfu-tech/buildchain/publication-package\";` | `packages/core/publication-package.js:120` |\n| `PUBLICATION_NPM_PACKAGE_CONTRACT` | constant: const PUBLICATION_NPM_PACKAGE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_NPM_PACKAGE_CONTRACT } from \"@kungfu-tech/buildchain/publication-package\";` | `packages/core/publication-package.js:6` |\n\n## `@kungfu-tech/buildchain/publication-reproducibility`\n\nTarget: `./packages/core/publication-reproducibility.js`. Public symbols: 2.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `PUBLICATION_REPRODUCIBILITY_RECEIPT_CONTRACT` | constant: const PUBLICATION_REPRODUCIBILITY_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_REPRODUCIBILITY_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/publication-reproducibility\";` | `packages/core/publication-reproducibility.js:12` |\n| `verifyPublicationReproducibility` | function: function verifyPublicationReproducibility({ cwd = process.cwd(), sourceSha = \"\", output = DEFAULT_OUTPUT, promote = false, keepWorkspaces = false, pullToolchain = true, packageName = \"\", allowUnpinnedToolchain = false, overlayPaths = [DEFAULT_REGISTRY_INPUT_DIR, DEFAULT_REGISTRY_HYDRATION], } = {}) | { cwd = process.cwd(), sourceSha = \"\", output = DEFAULT_OUTPUT, promote = false, keepWorkspaces = false, pullToolchain = true, packageName = \"\", allowUnpinnedToolchain = false, overlayPaths = [DEFAULT_REGISTRY_INPUT_DIR, DEFAULT_REGISTRY_HYDRATION], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { verifyPublicationReproducibility } from \"@kungfu-tech/buildchain/publication-reproducibility\";` | `packages/core/publication-reproducibility.js:869` |\n\n## `@kungfu-tech/buildchain/publication-sealed-bundle`\n\nTarget: `./packages/core/publication-sealed-bundle.js`. Public symbols: 3.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `createPublicationSealedBundle` | function: function createPublicationSealedBundle({ candidate, packageName, packageVersion, npmTarballPath, npmIntegrity, releaseAssetPaths = [], githubReleaseRequired = true, } = {}) | { candidate, packageName, packageVersion, npmTarballPath, npmIntegrity, releaseAssetPaths = [], githubReleaseRequired = true, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationSealedBundle } from \"@kungfu-tech/buildchain/publication-sealed-bundle\";` | `packages/core/publication-sealed-bundle.js:75` |\n| `PUBLICATION_SEALED_BUNDLE_CONTRACT` | constant: const PUBLICATION_SEALED_BUNDLE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_SEALED_BUNDLE_CONTRACT } from \"@kungfu-tech/buildchain/publication-sealed-bundle\";` | `packages/core/publication-sealed-bundle.js:10` |\n| `verifyPublicationSealedBundle` | function: function verifyPublicationSealedBundle({ bundleRoot, manifest } = {}) | { bundleRoot, manifest } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyPublicationSealedBundle } from \"@kungfu-tech/buildchain/publication-sealed-bundle\";` | `packages/core/publication-sealed-bundle.js:124` |\n\n## `@kungfu-tech/buildchain/paper`\n\nTarget: `./packages/core/paper.js`. Public symbols: 48.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `collectPaperAgentEntry` | function: function collectPaperAgentEntry({ cwd = process.cwd(), buildchainSha = \"\", mode = \"contract\", env = process.env, } = {}) | { cwd = process.cwd(), buildchainSha = \"\", mode = \"contract\", env = process.env, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectPaperAgentEntry } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-agent-entry.js:248` |\n| `collectPaperFleetAudit` | function: function collectPaperFleetAudit({ root = process.cwd(), repositories = [], buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainSha = \"\", governance = {}, } = {}) | { root = process.cwd(), repositories = [], buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainSha = \"\", governance = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectPaperFleetAudit } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-fleet.js:158` |\n| `collectPaperPreflight` | function: function collectPaperPreflight({ cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainRef = \"v3\", buildchainSha = \"\", registry = NPM_REGISTRY, offline = false, agentEntryMode = \"contract\", } = {}) | { cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainRef = \"v3\", buildchainSha = \"\", registry = NPM_REGISTRY, offline = false, agentEntryMode = \"contract\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectPaperPreflight } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:2413` |\n| `collectPaperStatus` | function: function collectPaperStatus({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectPaperStatus } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:1471` |\n| `createPaperAgentEntry` | function: function createPaperAgentEntry({ buildchainVersion, buildchainSha, developmentRef, }) | { buildchainVersion, buildchainSha, developmentRef, } | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPaperAgentEntry } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-agent-entry.js:93` |\n| `createPaperAlphaPlan` | function: function createPaperAlphaPlan({ cwd = process.cwd(), sourceRef = \"\", targetRef = \"\", } = {}) | { cwd = process.cwd(), sourceRef = \"\", targetRef = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPaperAlphaPlan } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:2655` |\n| `createPaperBuildPlan` | function: function createPaperBuildPlan({ cwd = process.cwd(), sourceSha = \"\", pullToolchain = true, } = {}) | { cwd = process.cwd(), sourceSha = \"\", pullToolchain = true, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPaperBuildPlan } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:2592` |\n| `createPaperProvisioningAuthority` | function: function createPaperProvisioningAuthority({ repository, packageName, buildchainVersion, buildchainSha, contractLock, buildWorkflow, verifyWorkflow, releaseWorkflow, agentEntry, agentInstructions, environment = \"\", }) | { repository, packageName, buildchainVersion, buildchainSha, contractLock, buildWorkflow, verifyWorkflow, releaseWorkflow, agentEntry, agentInstructions, environment = \"\", } | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPaperProvisioningAuthority } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:519` |\n| `createPaperResumePlan` | function: function createPaperResumePlan({ cwd = process.cwd(), buildchainRef = \"\", } = {}) | { cwd = process.cwd(), buildchainRef = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { createPaperResumePlan } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:2713` |\n| `createPaperWorkStartPlan` | function: function createPaperWorkStartPlan({ cwd = process.cwd(), topic = \"\", branch = \"\", buildchainSha = \"\", } = {}) | { cwd = process.cwd(), topic = \"\", branch = \"\", buildchainSha = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPaperWorkStartPlan } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-work.js:41` |\n| `createPaperWorkSubmitPlan` | function: function createPaperWorkSubmitPlan({ cwd = process.cwd(), pullRequests = [], pullRequestObservation = { ok: true }, buildchainSha = \"\", } = {}) | { cwd = process.cwd(), pullRequests = [], pullRequestObservation = { ok: true }, buildchainSha = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPaperWorkSubmitPlan } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-work.js:207` |\n| `discoverPaperFleet` | function: function discoverPaperFleet(root = process.cwd()) | root = process.cwd() | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { discoverPaperFleet } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-fleet.js:23` |\n| `executePaperNpmBootstrap` | function: function executePaperNpmBootstrap(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { executePaperNpmBootstrap } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:2840` |\n| `executePaperWorkStart` | function: function executePaperWorkStart(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { executePaperWorkStart } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-work.js:169` |\n| `executePaperWorkSubmitPush` | function: function executePaperWorkSubmitPush(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { executePaperWorkSubmitPush } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-work.js:357` |\n| `mergePaperAgentEntryInstructions` | function: function mergePaperAgentEntryInstructions(current = \"\", { developmentRef }) | current = \"\", { developmentRef } | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { mergePaperAgentEntryInstructions } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-agent-entry.js:61` |\n| `PAPER_AGENT_ENTRY_CONTRACT` | constant: const PAPER_AGENT_ENTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_AGENT_ENTRY_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-agent-entry.js:16` |\n| `PAPER_AGENT_ENTRY_SCHEMA_VERSION` | constant: const PAPER_AGENT_ENTRY_SCHEMA_VERSION | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_AGENT_ENTRY_SCHEMA_VERSION } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-agent-entry.js:17` |\n| `PAPER_AGENT_ENTRY_SECTION_END` | constant: const PAPER_AGENT_ENTRY_SECTION_END | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_AGENT_ENTRY_SECTION_END } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-agent-entry.js:20` |\n| `PAPER_AGENT_ENTRY_SECTION_START` | constant: const PAPER_AGENT_ENTRY_SECTION_START | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_AGENT_ENTRY_SECTION_START } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-agent-entry.js:18` |\n| `PAPER_ALPHA_PLAN_CONTRACT` | constant: const PAPER_ALPHA_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_ALPHA_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:90` |\n| `PAPER_BUILD_PLAN_CONTRACT` | constant: const PAPER_BUILD_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_BUILD_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:89` |\n| `PAPER_FLEET_AUDIT_CONTRACT` | constant: const PAPER_FLEET_AUDIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_FLEET_AUDIT_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-fleet.js:19` |\n| `PAPER_FLEET_UPDATE_PLAN_CONTRACT` | constant: const PAPER_FLEET_UPDATE_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_FLEET_UPDATE_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-fleet.js:20` |\n| `PAPER_MIGRATION_CONTRACT` | constant: const PAPER_MIGRATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_MIGRATION_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:82` |\n| `PAPER_NPM_BOOTSTRAP_CONTRACT` | constant: const PAPER_NPM_BOOTSTRAP_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_NPM_BOOTSTRAP_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:85` |\n| `PAPER_PATHS` | constant: const PAPER_PATHS | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_PATHS } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-repository.js:7` |\n| `PAPER_PREFLIGHT_CONTRACT` | constant: const PAPER_PREFLIGHT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_PREFLIGHT_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:83` |\n| `PAPER_PROVISIONING_CONTRACT` | constant: const PAPER_PROVISIONING_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_PROVISIONING_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:87` |\n| `PAPER_RESUME_PLAN_CONTRACT` | constant: const PAPER_RESUME_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_RESUME_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:91` |\n| `PAPER_SCAFFOLD_CONTRACT` | constant: const PAPER_SCAFFOLD_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_SCAFFOLD_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:81` |\n| `PAPER_STATE_ORDER` | constant: const PAPER_STATE_ORDER | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_STATE_ORDER } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:94` |\n| `PAPER_STATUS_CONTRACT` | constant: const PAPER_STATUS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_STATUS_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:84` |\n| `PAPER_VISIBILITY_CONTRACT` | constant: const PAPER_VISIBILITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_VISIBILITY_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:92` |\n| `PAPER_WORK_START_PLAN_CONTRACT` | constant: const PAPER_WORK_START_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_WORK_START_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-work.js:17` |\n| `PAPER_WORK_SUBMIT_PLAN_CONTRACT` | constant: const PAPER_WORK_SUBMIT_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_WORK_SUBMIT_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-work.js:19` |\n| `paperAgentEntryFiles` | function: function paperAgentEntryFiles({ cwd, buildchainVersion, buildchainSha, developmentRef = \"\", }) | { cwd, buildchainVersion, buildchainSha, developmentRef = \"\", } | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { paperAgentEntryFiles } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-agent-entry.js:150` |\n| `paperAgentEntryInstructions` | function: function paperAgentEntryInstructions({ developmentRef }) | { developmentRef } | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { paperAgentEntryInstructions } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-agent-entry.js:36` |\n| `paperFleetTransitionWorkspace` | function: function paperFleetTransitionWorkspace(workspaceText, lockText) | workspaceText, lockText | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { paperFleetTransitionWorkspace } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-fleet.js:290` |\n| `planPaperFleetUpdate` | function: function planPaperFleetUpdate(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { planPaperFleetUpdate } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-fleet.js:209` |\n| `planPaperMigration` | function: function planPaperMigration({ cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainSha = \"\", } = {}) | { cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainSha = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { planPaperMigration } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:1013` |\n| `planPaperScaffold` | function: function planPaperScaffold({ cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainRef = \"v3\", buildchainSha = \"\", name = path.basename(path.resolve(cwd)), title = \"\", packageName = \"\", repository = \"\", version = \"0.1.0-alpha.0\", siteBaseUrl = \"\", } = {}) | { cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainRef = \"v3\", buildchainSha = \"\", name = path.basename(path.resolve(cwd)), title = \"\", packageName = \"\", repository = \"\", version = \"0.1.0-alpha.0\", siteBaseUrl = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { planPaperScaffold } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:702` |\n| `resolvePaperBuildchainSha` | function: function resolvePaperBuildchainSha(buildchainRoot, buildchainSha = \"\") | buildchainRoot, buildchainSha = \"\" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolvePaperBuildchainSha } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-agent-entry.js:177` |\n| `resolvePaperRepository` | function: function resolvePaperRepository(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolvePaperRepository } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-repository.js:133` |\n| `resolvePaperRuntimeGitSha` | function: function resolvePaperRuntimeGitSha(buildchainRoot, buildchainVersion = \"\") | buildchainRoot, buildchainVersion = \"\" | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolvePaperRuntimeGitSha } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:245` |\n| `writePaperFleetUpdate` | function: function writePaperFleetUpdate(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { writePaperFleetUpdate } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-fleet.js:271` |\n| `writePaperMigration` | function: function writePaperMigration(plan) | plan | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { writePaperMigration } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:1129` |\n| `writePaperScaffold` | function: function writePaperScaffold(plan) | plan | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { writePaperScaffold } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:847` |\n\n## `@kungfu-tech/buildchain/publication-authority`\n\nTarget: `./packages/core/publication-authority.js`. Public symbols: 24.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `CONSUMER_PUBLICATION_DECISION_CONTRACT` | constant: const CONSUMER_PUBLICATION_DECISION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { CONSUMER_PUBLICATION_DECISION_CONTRACT } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:20` |\n| `createConsumerPublicationDecision` | function: function createConsumerPublicationDecision({ capability, gateAggregate, decision, predicateId, predicateDigest, evidence = {}, now = new Date(), } = {}) | { capability, gateAggregate, decision, predicateId, predicateDigest, evidence = {}, now = new Date(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createConsumerPublicationDecision } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:991` |\n| `createPublicationAdmission` | function: function createPublicationAdmission(input = {}) | input = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPublicationAdmission } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:236` |\n| `createPublicationArtifactManifestSet` | function: function createPublicationArtifactManifestSet({ repository, sourceSha, sourceTreeSha, manifests = [], payloads = [], } = {}) | { repository, sourceSha, sourceTreeSha, manifests = [], payloads = [], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationArtifactManifestSet } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:303` |\n| `createPublicationAuthorityRegistry` | function: function createPublicationAuthorityRegistry({ descriptors = [], workflows = [] } = {}) | { descriptors = [], workflows = [] } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationAuthorityRegistry } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:121` |\n| `createPublicationControlPlaneAudit` | function: function createPublicationControlPlaneAudit({ repository, workflowPath, publisherWorkflowPath, environment, facts = [], observedAt, expiresAt, } = {}) | { repository, workflowPath, publisherWorkflowPath, environment, facts = [], observedAt, expiresAt, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPublicationControlPlaneAudit } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:208` |\n| `createPublicationGateDecision` | function: function createPublicationGateDecision({ sourceSha, profile, required = false, rationale, policy = {}, } = {}) | { sourceSha, profile, required = false, rationale, policy = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPublicationGateDecision } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:280` |\n| `createPublicationQualificationReceipt` | function: function createPublicationQualificationReceipt({ capability, gateAggregate, consumerDecision, now = new Date(), } = {}) | { capability, gateAggregate, consumerDecision, now = new Date(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationQualificationReceipt } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:1035` |\n| `createRunnerProvenance` | function: function createRunnerProvenance({ runnerClass, os, architecture, imageDigest, measurementDigest, baselineDigest = \"\", toolchainDigest = \"\", cacheContractDigest = \"\", taskIsolationDigest = \"\", cleanBaselineProven = false, isolation = \"\", } = {}) | { runnerClass, os, architecture, imageDigest, measurementDigest, baselineDigest = \"\", toolchainDigest = \"\", cacheContractDigest = \"\", taskIsolationDigest = \"\", cleanBaselineProven = false, isolation = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createRunnerProvenance } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:166` |\n| `detectPublicationAuthoritySignals` | function: function detectPublicationAuthoritySignals(workflowText = \"\") | workflowText = \"\" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { detectPublicationAuthoritySignals } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:104` |\n| `PUBLICATION_ADMISSION_CONTRACT` | constant: const PUBLICATION_ADMISSION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ADMISSION_CONTRACT } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:10` |\n| `PUBLICATION_ARTIFACT_MANIFEST_SET_CONTRACT` | constant: const PUBLICATION_ARTIFACT_MANIFEST_SET_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_MANIFEST_SET_CONTRACT } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:24` |\n| `PUBLICATION_AUTHORITY_CLASSES` | constant: const PUBLICATION_AUTHORITY_CLASSES | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_AUTHORITY_CLASSES } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:27` |\n| `PUBLICATION_AUTHORITY_REGISTRY_CONTRACT` | constant: const PUBLICATION_AUTHORITY_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_AUTHORITY_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:8` |\n| `PUBLICATION_CAPABILITY_CONTRACT` | constant: const PUBLICATION_CAPABILITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_CAPABILITY_CONTRACT } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:12` |\n| `PUBLICATION_CONTROL_PLANE_AUDIT_CONTRACT` | constant: const PUBLICATION_CONTROL_PLANE_AUDIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_CONTROL_PLANE_AUDIT_CONTRACT } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:16` |\n| `PUBLICATION_GATE_DECISION_CONTRACT` | constant: const PUBLICATION_GATE_DECISION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_GATE_DECISION_CONTRACT } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:18` |\n| `PUBLICATION_QUALIFICATION_RECEIPT_CONTRACT` | constant: const PUBLICATION_QUALIFICATION_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_QUALIFICATION_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:22` |\n| `publicationAuthorityDigest` | function: function publicationAuthorityDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { publicationAuthorityDigest } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:72` |\n| `publicationGateAggregateBindings` | function: function publicationGateAggregateBindings(gateAggregate) | gateAggregate | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { publicationGateAggregateBindings } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:408` |\n| `RUNNER_PROVENANCE_CLASSES` | constant: const RUNNER_PROVENANCE_CLASSES | none | value | Import does not declare a throw contract. | none-on-import | `import { RUNNER_PROVENANCE_CLASSES } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:36` |\n| `RUNNER_PROVENANCE_CONTRACT` | constant: const RUNNER_PROVENANCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RUNNER_PROVENANCE_CONTRACT } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:14` |\n| `verifyPublicationAdmission` | function: function verifyPublicationAdmission({ admission, registry, runnerProvenance, controlPlaneAudit, publicationEvidence, expected = {}, usedNonces = [], now = new Date(), } = {}) | { admission, registry, runnerProvenance, controlPlaneAudit, publicationEvidence, expected = {}, usedNonces = [], now = new Date(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyPublicationAdmission } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:791` |\n| `verifyPublicationQualificationReceipt` | function: function verifyPublicationQualificationReceipt({ receipt, capability, gateAggregate, expected = {}, usedNonces = [], now = new Date(), } = {}) | { receipt, capability, gateAggregate, expected = {}, usedNonces = [], now = new Date(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyPublicationQualificationReceipt } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:1096` |\n\n## `@kungfu-tech/buildchain/publication-control-plane-audit`\n\nTarget: `./packages/core/publication-control-plane-audit.js`. Public symbols: 4.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `BUILDCHAIN_RELEASE_RECONCILIATION_PATHS` | constant: const BUILDCHAIN_RELEASE_RECONCILIATION_PATHS | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_RELEASE_RECONCILIATION_PATHS } from \"@kungfu-tech/buildchain/publication-control-plane-audit\";` | `packages/core/publication-control-plane-audit.js:3` |\n| `evaluateBuildchainReleaseReconciliation` | function: function evaluateBuildchainReleaseReconciliation({ repository, publicationVersion, packageVersion, message, parentSha, changedPaths, } = {}) | { repository, publicationVersion, packageVersion, message, parentSha, changedPaths, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluateBuildchainReleaseReconciliation } from \"@kungfu-tech/buildchain/publication-control-plane-audit\";` | `packages/core/publication-control-plane-audit.js:41` |\n| `evaluatePublicationControlPlaneSnapshot` | function: function evaluatePublicationControlPlaneSnapshot({ repository, workflowPath, publisherWorkflowPath = workflowPath, environment, branch, packageName, publisherMode = \"npm-trusted-publisher\", requiredStatusCheck = \"check\", snapshot, observedAt, expiresAt, } = {}) | { repository, workflowPath, publisherWorkflowPath = workflowPath, environment, branch, packageName, publisherMode = \"npm-trusted-publisher\", requiredStatusCheck = \"check\", snapshot, observedAt, expiresAt, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluatePublicationControlPlaneSnapshot } from \"@kungfu-tech/buildchain/publication-control-plane-audit\";` | `packages/core/publication-control-plane-audit.js:75` |\n| `matchesGithubDeploymentPolicy` | function: function matchesGithubDeploymentPolicy(policy, { ref, refType = \"branch\" } = {}) | policy, { ref, refType = \"branch\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { matchesGithubDeploymentPolicy } from \"@kungfu-tech/buildchain/publication-control-plane-audit\";` | `packages/core/publication-control-plane-audit.js:31` |\n\n## `@kungfu-tech/buildchain/buildchain-publication-authority`\n\nTarget: `./packages/core/buildchain-publication-authority.js`. Public symbols: 2.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `buildchainPublicationAuthorityDescriptors` | function: function buildchainPublicationAuthorityDescriptors() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { buildchainPublicationAuthorityDescriptors } from \"@kungfu-tech/buildchain/buildchain-publication-authority\";` | `packages/core/buildchain-publication-authority.js:53` |\n| `createBuildchainPublicationAuthorityRegistry` | function: function createBuildchainPublicationAuthorityRegistry({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainPublicationAuthorityRegistry } from \"@kungfu-tech/buildchain/buildchain-publication-authority\";` | `packages/core/buildchain-publication-authority.js:78` |\n\n## `@kungfu-tech/buildchain/github-governance-authority`\n\nTarget: `./packages/core/github-governance-authority.js`. Public symbols: 22.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY` | constant: const BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:1363` |\n| `BUILDCHAIN_GITHUB_GOVERNANCE_PROTECTED_PATHS` | constant: const BUILDCHAIN_GITHUB_GOVERNANCE_PROTECTED_PATHS | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_GITHUB_GOVERNANCE_PROTECTED_PATHS } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:1365` |\n| `codeownersForPath` | function: function codeownersForPath(source, candidatePath) | source, candidatePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { codeownersForPath } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:417` |\n| `compileEffectiveGithubGovernancePolicy` | function: function compileEffectiveGithubGovernancePolicy({ branch, defaultBranch, protectedBranch = false, protection, rulesets = [], } = {}) | { branch, defaultBranch, protectedBranch = false, protection, rulesets = [], } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { compileEffectiveGithubGovernancePolicy } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:311` |\n| `createBuildchainGithubGovernanceAuthority` | function: function createBuildchainGithubGovernanceAuthority() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainGithubGovernanceAuthority } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:450` |\n| `createGithubGovernanceRolloutPlan` | function: function createGithubGovernanceRolloutPlan({ repository, targetRef, inventory, rollbackSnapshot, rollbackProtectionExists = true, desiredProtection, } = {}) | { repository, targetRef, inventory, rollbackSnapshot, rollbackProtectionExists = true, desiredProtection, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGithubGovernanceRolloutPlan } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:932` |\n| `createGithubRulesetBypassRolloutPlan` | function: function createGithubRulesetBypassRolloutPlan({ repository, rulesetId, inventory, rollbackSnapshot, } = {}) | { repository, rulesetId, inventory, rollbackSnapshot, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGithubRulesetBypassRolloutPlan } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:1110` |\n| `createGithubRulesetGovernanceRolloutPlan` | function: function createGithubRulesetGovernanceRolloutPlan({ repository, targetRef, rulesetId, rulesetName, inventory, rollbackSnapshot, desiredProtection, } = {}) | { repository, targetRef, rulesetId, rulesetName, inventory, rollbackSnapshot, desiredProtection, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGithubRulesetGovernanceRolloutPlan } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:1189` |\n| `evaluateCodeownersAuthority` | function: function evaluateCodeownersAuthority({ source = \"\", sourcePath = \"\", reviewAuthority = \"kungfu-origin\", protectedPaths = PROTECTED_AUTHORITY_PATHS, } = {}) | { source = \"\", sourcePath = \"\", reviewAuthority = \"kungfu-origin\", protectedPaths = PROTECTED_AUTHORITY_PATHS, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluateCodeownersAuthority } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:425` |\n| `evaluateGithubGovernanceSnapshot` | function: function evaluateGithubGovernanceSnapshot({ descriptor = createBuildchainGithubGovernanceAuthority(), repository, targetRef, organizationPlan, codeowners, effectivePolicy, memberships, apiEvidence = {}, observedAt, expiresAt, verifier = {}, } = {}) | { descriptor = createBuildchainGithubGovernanceAuthority(), repository, targetRef, organizationPlan, codeowners, effectivePolicy, memberships, apiEvidence = {}, observedAt, expiresAt, verifier = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { evaluateGithubGovernanceSnapshot } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:694` |\n| `GITHUB_GOVERNANCE_AUTHORITY_CONTRACT` | constant: const GITHUB_GOVERNANCE_AUTHORITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_GOVERNANCE_AUTHORITY_CONTRACT } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:3` |\n| `GITHUB_GOVERNANCE_RECEIPT_CONTRACT` | constant: const GITHUB_GOVERNANCE_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_GOVERNANCE_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:5` |\n| `GITHUB_GOVERNANCE_ROLLOUT_CONTRACT` | constant: const GITHUB_GOVERNANCE_ROLLOUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_GOVERNANCE_ROLLOUT_CONTRACT } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:7` |\n| `GITHUB_GOVERNANCE_RULESET_ROLLOUT_CONTRACT` | constant: const GITHUB_GOVERNANCE_RULESET_ROLLOUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_GOVERNANCE_RULESET_ROLLOUT_CONTRACT } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:9` |\n| `githubGovernanceDigest` | function: function githubGovernanceDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { githubGovernanceDigest } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:163` |\n| `githubRepositoryIdentityRoot` | function: function githubRepositoryIdentityRoot({ provider = \"github\", providerRepositoryId, } = {}) | { provider = \"github\", providerRepositoryId, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { githubRepositoryIdentityRoot } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:540` |\n| `normalizeGithubBranchProtectionSnapshot` | function: function normalizeGithubBranchProtectionSnapshot(protection = {}) | protection = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { normalizeGithubBranchProtectionSnapshot } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:1025` |\n| `normalizeGithubRulesetSnapshot` | function: function normalizeGithubRulesetSnapshot(ruleset = {}) | ruleset = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { normalizeGithubRulesetSnapshot } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:1095` |\n| `parseCodeowners` | function: function parseCodeowners(source) | source | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { parseCodeowners } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:401` |\n| `resolveGithubGovernanceTargetPolicy` | function: function resolveGithubGovernanceTargetPolicy({ descriptor = BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY, repository, targetRef, } = {}) | { descriptor = BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY, repository, targetRef, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveGithubGovernanceTargetPolicy } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:607` |\n| `resolveGithubGovernanceTargetRefs` | function: function resolveGithubGovernanceTargetRefs({ descriptor = BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY, repository, availableRefs = [], requestedTargetRef = \"\", } = {}) | { descriptor = BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY, repository, availableRefs = [], requestedTargetRef = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveGithubGovernanceTargetRefs } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:630` |\n| `verifyGithubGovernanceReceipt` | function: function verifyGithubGovernanceReceipt(receipt, { expectedOrganization, expectedRepository, expectedRepositoryIdentityRoot, expectedTargetRef, expectedPolicyRoot, expectedVerifierSourceRevision, now = new Date().toISOString(), } = {}) | receipt, { expectedOrganization, expectedRepository, expectedRepositoryIdentityRoot, expectedTargetRef, expectedPolicyRoot, expectedVerifierSourceRevision, now = new Date().toISOString(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyGithubGovernanceReceipt } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:884` |\n\n## `@kungfu-tech/buildchain/kfd-gate`\n\nTarget: `./packages/core/kfd-gate.js`. Public symbols: 19.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `BUILDCHAIN_JSON_FORMATTING_POLICY` | constant: const BUILDCHAIN_JSON_FORMATTING_POLICY | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_JSON_FORMATTING_POLICY } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:14` |\n| `createKfd1ReleaseGateEvidence` | function: function createKfd1ReleaseGateEvidence({ cwd = process.cwd(), artifactRoot = \"\", artifacts = [], witnesses = [], verifiedAt = new Date().toISOString(), metadata = resolveKfd1Metadata(), } = {}) | { cwd = process.cwd(), artifactRoot = \"\", artifacts = [], witnesses = [], verifiedAt = new Date().toISOString(), metadata = resolveKfd1Metadata(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfd1ReleaseGateEvidence } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:977` |\n| `createKfd3CollaborationInterfaceReleaseGateEvidence` | function: function createKfd3CollaborationInterfaceReleaseGateEvidence({ prebuildWitnesses = [], artifactWitnesses = [], prebuildWitnessMetas = [], artifactWitnessMetas = [], artifactCommandMeta = undefined, verifiedAt = new Date().toISOString(), metadata = resolveKfd3Metadata(), } = {}) | { prebuildWitnesses = [], artifactWitnesses = [], prebuildWitnessMetas = [], artifactWitnessMetas = [], artifactCommandMeta = undefined, verifiedAt = new Date().toISOString(), metadata = resolveKfd3Metadata(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfd3CollaborationInterfaceReleaseGateEvidence } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:1132` |\n| `KFD1_RELEASE_GATE_CONTRACT` | constant: const KFD1_RELEASE_GATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD1_RELEASE_GATE_CONTRACT } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:9` |\n| `KFD1_WITNESS_SET_CONTRACT` | constant: const KFD1_WITNESS_SET_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD1_WITNESS_SET_CONTRACT } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:10` |\n| `KFD3_ARTIFACT_WITNESS_CONTRACT` | constant: const KFD3_ARTIFACT_WITNESS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_ARTIFACT_WITNESS_CONTRACT } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:13` |\n| `KFD3_PREBUILD_WITNESS_CONTRACT` | constant: const KFD3_PREBUILD_WITNESS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_PREBUILD_WITNESS_CONTRACT } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:12` |\n| `KFD3_RELEASE_GATE_CONTRACT` | constant: const KFD3_RELEASE_GATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_RELEASE_GATE_CONTRACT } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:11` |\n| `normalizeKfd1ContractWorldWitness` | function: function normalizeKfd1ContractWorldWitness(witness, { metadata = resolveKfd1Metadata() } = {}) | witness, { metadata = resolveKfd1Metadata() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfd1ContractWorldWitness } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:897` |\n| `normalizeKfd3CollaborationInterfaceArtifactWitness` | function: function normalizeKfd3CollaborationInterfaceArtifactWitness(witness, { metadata = resolveKfd3Metadata() } = {}) | witness, { metadata = resolveKfd3Metadata() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfd3CollaborationInterfaceArtifactWitness } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:738` |\n| `normalizeKfd3CollaborationInterfacePrebuildWitness` | function: function normalizeKfd3CollaborationInterfacePrebuildWitness(witness, { metadata = resolveKfd3Metadata() } = {}) | witness, { metadata = resolveKfd3Metadata() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfd3CollaborationInterfacePrebuildWitness } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:667` |\n| `resolveKfd1Metadata` | function: function resolveKfd1Metadata() | none | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveKfd1Metadata } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:89` |\n| `resolveKfd2Metadata` | function: function resolveKfd2Metadata({ requireTrustTaxonomy = false } = {}) | { requireTrustTaxonomy = false } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveKfd2Metadata } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:173` |\n| `resolveKfd3Metadata` | function: function resolveKfd3Metadata({ requireSchemas = false } = {}) | { requireSchemas = false } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveKfd3Metadata } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:128` |\n| `sha256File` | function: function sha256File(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sha256File } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:54` |\n| `sha256Json` | function: function sha256Json(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { sha256Json } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:50` |\n| `validateKfd1ReleaseGateEvidence` | function: function validateKfd1ReleaseGateEvidence(section, { metadata = resolveKfd1Metadata() } = {}) | section, { metadata = resolveKfd1Metadata() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfd1ReleaseGateEvidence } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:1337` |\n| `validateKfd2TrustTaxonomyEntry` | function: function validateKfd2TrustTaxonomyEntry(entry, { kind = \"residualRisk\", label = kind, metadata = resolveKfd2Metadata({ requireTrustTaxonomy: true }), extensionRequests = [], } = {}) | entry, { kind = \"residualRisk\", label = kind, metadata = resolveKfd2Metadata({ requireTrustTaxonomy: true }), extensionRequests = [], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateKfd2TrustTaxonomyEntry } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:506` |\n| `validateKfd3CollaborationInterfaceReleaseGateEvidence` | function: function validateKfd3CollaborationInterfaceReleaseGateEvidence(section, { metadata = resolveKfd3Metadata() } = {}) | section, { metadata = resolveKfd3Metadata() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfd3CollaborationInterfaceReleaseGateEvidence } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:1470` |\n\n## `@kungfu-tech/buildchain/release-candidate`\n\nTarget: `./packages/core/release-candidate.js`. Public symbols: 5.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `createReleaseCandidatePassport` | function: function createReleaseCandidatePassport({ repository = \"\", pullRequest = {}, targetChannel = \"\", version = \"\", sourceHeadSha = \"\", baseSha = \"\", mergeRefSha = \"\", sourceTreeHash = \"\", buildSummary = {}, buildchain = {}, gateAggregate = undefined, familyEvidence = undefined, controllerReceipts = [], controllerReceiptReferences = [], workflow = {}, createdAt = nowIso(), } = {}) | { repository = \"\", pullRequest = {}, targetChannel = \"\", version = \"\", sourceHeadSha = \"\", baseSha = \"\", mergeRefSha = \"\", sourceTreeHash = \"\", buildSummary = {}, buildchain = {}, gateAggregate = undefined, familyEvidence = undefined, controllerReceipts = [], controllerReceiptReferences = [], workflow = {}, createdAt = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleaseCandidatePassport } from \"@kungfu-tech/buildchain/release-candidate\";` | `packages/core/release-candidate.js:310` |\n| `FAMILY_RELEASE_EVIDENCE_CONTRACT` | constant: const FAMILY_RELEASE_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { FAMILY_RELEASE_EVIDENCE_CONTRACT } from \"@kungfu-tech/buildchain/release-candidate\";` | `packages/core/release-candidate.js:5` |\n| `RELEASE_CANDIDATE_PASSPORT_CONTRACT` | constant: const RELEASE_CANDIDATE_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_CANDIDATE_PASSPORT_CONTRACT } from \"@kungfu-tech/buildchain/release-candidate\";` | `packages/core/release-candidate.js:4` |\n| `sha256Json` | function: function sha256Json(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sha256Json } from \"@kungfu-tech/buildchain/release-candidate\";` | `packages/core/release-candidate.js:90` |\n| `validateReleaseCandidatePassport` | function: function validateReleaseCandidatePassport({ passport, repository = \"\", targetChannel = \"\", version = \"\", sourceHeadSha = \"\", buildSummary = undefined, requirePlatforms = true, requireFamilyEvidence = false, familyEvidenceRoot = \"\", familyInitiativeId = \"\", familyAssignmentId = \"\", } = {}) | { passport, repository = \"\", targetChannel = \"\", version = \"\", sourceHeadSha = \"\", buildSummary = undefined, requirePlatforms = true, requireFamilyEvidence = false, familyEvidenceRoot = \"\", familyInitiativeId = \"\", familyAssignmentId = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateReleaseCandidatePassport } from \"@kungfu-tech/buildchain/release-candidate\";` | `packages/core/release-candidate.js:404` |\n\n## `@kungfu-tech/buildchain/stable-candidate-ledger`\n\nTarget: `./packages/core/stable-candidate-ledger.js`. Public symbols: 11.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `createStableCandidateLedger` | function: function createStableCandidateLedger({ repository, targetBranch, now = new Date().toISOString() } = {}) | { repository, targetBranch, now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createStableCandidateLedger } from \"@kungfu-tech/buildchain/stable-candidate-ledger\";` | `packages/core/stable-candidate-ledger.js:56` |\n| `markStableCandidatePromoted` | function: function markStableCandidatePromoted(ledgerInput, versionInput, { stableTag = \"\", stableSha = \"\", now = new Date().toISOString() } = {}) | ledgerInput, versionInput, { stableTag = \"\", stableSha = \"\", now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { markStableCandidatePromoted } from \"@kungfu-tech/buildchain/stable-candidate-ledger\";` | `packages/core/stable-candidate-ledger.js:229` |\n| `normalizeStableCandidateLedger` | function: function normalizeStableCandidateLedger(input, expected = {}) | input, expected = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeStableCandidateLedger } from \"@kungfu-tech/buildchain/stable-candidate-ledger\";` | `packages/core/stable-candidate-ledger.js:76` |\n| `qualifyStableCandidate` | function: function qualifyStableCandidate(ledgerInput, observation, { minimumSoakSeconds = 3600, now = new Date().toISOString() } = {}) | ledgerInput, observation, { minimumSoakSeconds = 3600, now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { qualifyStableCandidate } from \"@kungfu-tech/buildchain/stable-candidate-ledger\";` | `packages/core/stable-candidate-ledger.js:139` |\n| `registerStableCandidate` | function: function registerStableCandidate(ledgerInput, candidateInput, { now = new Date().toISOString() } = {}) | ledgerInput, candidateInput, { now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { registerStableCandidate } from \"@kungfu-tech/buildchain/stable-candidate-ledger\";` | `packages/core/stable-candidate-ledger.js:106` |\n| `revokeStableCandidate` | function: function revokeStableCandidate(ledgerInput, versionInput, { reason, actor = \"\", now = new Date().toISOString() } = {}) | ledgerInput, versionInput, { reason, actor = \"\", now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { revokeStableCandidate } from \"@kungfu-tech/buildchain/stable-candidate-ledger\";` | `packages/core/stable-candidate-ledger.js:185` |\n| `selectStableCandidate` | function: function selectStableCandidate(ledgerInput, { releaseNow = \"\", now = new Date().toISOString() } = {}) | ledgerInput, { releaseNow = \"\", now = new Date().toISOString() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { selectStableCandidate } from \"@kungfu-tech/buildchain/stable-candidate-ledger\";` | `packages/core/stable-candidate-ledger.js:206` |\n| `setStableCandidateHold` | function: function setStableCandidateHold(ledgerInput, enabled, { reason = \"\", now = new Date().toISOString() } = {}) | ledgerInput, enabled, { reason = \"\", now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { setStableCandidateHold } from \"@kungfu-tech/buildchain/stable-candidate-ledger\";` | `packages/core/stable-candidate-ledger.js:198` |\n| `STABLE_CANDIDATE_LEDGER_CONTRACT` | constant: const STABLE_CANDIDATE_LEDGER_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { STABLE_CANDIDATE_LEDGER_CONTRACT } from \"@kungfu-tech/buildchain/stable-candidate-ledger\";` | `packages/core/stable-candidate-ledger.js:1` |\n| `STABLE_CANDIDATE_STATES` | constant: const STABLE_CANDIDATE_STATES | none | value | Import does not declare a throw contract. | none-on-import | `import { STABLE_CANDIDATE_STATES } from \"@kungfu-tech/buildchain/stable-candidate-ledger\";` | `packages/core/stable-candidate-ledger.js:2` |\n| `stableCandidatePromotionRefs` | function: function stableCandidatePromotionRefs(candidateInput, targetBranch) | candidateInput, targetBranch | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { stableCandidatePromotionRefs } from \"@kungfu-tech/buildchain/stable-candidate-ledger\";` | `packages/core/stable-candidate-ledger.js:264` |\n\n## `@kungfu-tech/buildchain/release-passport`\n\nTarget: `./packages/core/release-passport.js`. Public symbols: 23.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `AGENT_INDEX_CONTRACT` | constant: const AGENT_INDEX_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { AGENT_INDEX_CONTRACT } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:31` |\n| `ARTIFACT_EVIDENCE_CONTRACT` | constant: const ARTIFACT_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_EVIDENCE_CONTRACT } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:29` |\n| `collectGitHubReleasePassport` | function: function collectGitHubReleasePassport({ cwd = process.cwd(), tag = \"\", repository = process.env.GITHUB_REPOSITORY \\|\\| \"\", sourceSha = process.env.GITHUB_SHA \\|\\| \"\", line = \"\", outputDir = \".buildchain/release-passport\", assetsJson = \"\", assetsDir = \"\", releaseJson = \"\", productName = \"Buildchain\", packageName = \"@kungfu-tech/buildchain\", packageVersion = \"\", packageSetJson = \"\", publishEvidenceJson = \"\", trustedPublishingJson = \"\", transactionJson = \"\", anchorManifestJson = \"\", versionMaterialJson = \"\", impactJson = \"\", buildSummaryJson = \"\", buildFactsJsons = [], platformManifestJsons = [], distTagEvidenceJson = \"\", kfd1WitnessJsons = [], kfd2ClaimJsons = [], kfd3PrebuildWitnessJsons = [], kfd3ArtifactWitnessJsons = [], kfd3ArtifactVerifyCommand = \"\", kfdSupportMatrixJson = \"\", kfdProductGateJsons = [], invariantPassportJsons = [], invariantPassportCommand = \"\", releaseEvidenceJsons = [], kfdAgentHubEvidenceJson = \"\", controllerReceiptReferences = [], githubArtifactAttestationPolicyJsons = [], basePassportJson = \"\", requireBaseKfd = false, releaseJsonExtra = \"\", publishJson = \"\", workflow = {}, checkedAt = \"\", } = {}) | { cwd = process.cwd(), tag = \"\", repository = process.env.GITHUB_REPOSITORY \\|\\| \"\", sourceSha = process.env.GITHUB_SHA \\|\\| \"\", line = \"\", outputDir = \".buildchain/release-passport\", assetsJson = \"\", assetsDir = \"\", releaseJson = \"\", productName = \"Buildchain\", packageName = \"@kungfu-tech/buildchain\", packageVersion = \"\", packageSetJson = \"\", publishEvidenceJson = \"\", trustedPublishingJson = \"\", transactionJson = \"\", anchorManifestJson = \"\", versionMaterialJson = \"\", impactJson = \"\", buildSummaryJson = \"\", buildFactsJsons = [], platformManifestJsons = [], distTagEvidenceJson = \"\", kfd1WitnessJsons = [], kfd2ClaimJsons = [], kfd3PrebuildWitnessJsons = [], kfd3ArtifactWitnessJsons = [], kfd3ArtifactVerifyCommand = \"\", kfdSupportMatrixJson = \"\", kfdProductGateJsons = [], invariantPassportJsons = [], invariantPassportCommand = \"\", releaseEvidenceJsons = [], kfdAgentHubEvidenceJson = \"\", controllerReceiptReferences = [], githubArtifactAttestationPolicyJsons = [], basePassportJson = \"\", requireBaseKfd = false, releaseJsonExtra = \"\", publishJson = \"\", workflow = {}, checkedAt = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { collectGitHubReleasePassport } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:1488` |\n| `createArtifactEvidence` | function: function createArtifactEvidence({ assets = [], repository = \"\", tag = \"\", sourceSha = \"\", workflow = {} } = {}) | { assets = [], repository = \"\", tag = \"\", sourceSha = \"\", workflow = {} } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createArtifactEvidence } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:1158` |\n| `createInvariantPassportGate` | function: function createInvariantPassportGate(passportMetas = []) | passportMetas = [] | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createInvariantPassportGate } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:201` |\n| `createReleaseCheckReport` | function: function createReleaseCheckReport({ passport, artifactEvidence, publishEvidence, impact, agentIndex, productMechanism, kfdAgentHubEvidence, kfdSupportEvidence, releaseEvidenceDocuments = [], checkedAt = nowIso(), } = {}) | { passport, artifactEvidence, publishEvidence, impact, agentIndex, productMechanism, kfdAgentHubEvidence, kfdSupportEvidence, releaseEvidenceDocuments = [], checkedAt = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleaseCheckReport } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:2628` |\n| `createReleasePassport` | function: function createReleasePassport({ cwd = process.cwd(), repository = \"\", tag = \"\", sourceSha = \"\", line = \"\", productName = \"Buildchain\", packageName = \"@kungfu-tech/buildchain\", packageVersion = \"\", productMechanismPath = \"product-mechanism.json\", artifactEvidencePath = \"artifact-evidence.json\", impactPath = \"impact.json\", agentIndexPath = \"agent-index.json\", checkReportPath = \"check-report.json\", publishEvidencePath = \"\", transactionStatePath = \"\", assets = [], packageSet = undefined, anchorManifest = undefined, versionMaterial = undefined, publishEvidence = undefined, trustedPublishing = undefined, transaction = undefined, buildSummary = undefined, buildFacts = [], platformArtifactManifests = [], distTagPromotionEvidence = undefined, release = {}, publish = {}, impact = undefined, workflow = {}, kfd1 = undefined, kfd2Claims = [], kfd3 = undefined, kfdSupport = undefined, kfdSupportEvidencePath = \"\", invariantPassports = undefined, releaseEvidence = [], kfdAgentHubEvidence = undefined, kfdAgentHubEvidencePath = \"\", controllerReceipts = [], controllerReceiptReferences = [], githubArtifactAttestations = [], checkedAt = \"\", } = {}) | { cwd = process.cwd(), repository = \"\", tag = \"\", sourceSha = \"\", line = \"\", productName = \"Buildchain\", packageName = \"@kungfu-tech/buildchain\", packageVersion = \"\", productMechanismPath = \"product-mechanism.json\", artifactEvidencePath = \"artifact-evidence.json\", impactPath = \"impact.json\", agentIndexPath = \"agent-index.json\", checkReportPath = \"check-report.json\", publishEvidencePath = \"\", transactionStatePath = \"\", assets = [], packageSet = undefined, anchorManifest = undefined, versionMaterial = undefined, publishEvidence = undefined, trustedPublishing = undefined, transaction = undefined, buildSummary = undefined, buildFacts = [], platformArtifactManifests = [], distTagPromotionEvidence = undefined, release = {}, publish = {}, impact = undefined, workflow = {}, kfd1 = undefined, kfd2Claims = [], kfd3 = undefined, kfdSupport = undefined, kfdSupportEvidencePath = \"\", invariantPassports = undefined, releaseEvidence = [], kfdAgentHubEvidence = undefined, kfdAgentHubEvidencePath = \"\", controllerReceipts = [], controllerReceiptReferences = [], githubArtifactAttestations = [], checkedAt = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleasePassport } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:1214` |\n| `explainReleasePassport` | function: async function explainReleasePassport({ passportLocation, forAudience = \"human\" } = {}) | { passportLocation, forAudience = \"human\" } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { explainReleasePassport } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:2812` |\n| `IMPACT_LEDGER_CONTRACT` | constant: const IMPACT_LEDGER_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { IMPACT_LEDGER_CONTRACT } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:30` |\n| `INVARIANT_PASSPORT_GATE_CONTRACT` | constant: const INVARIANT_PASSPORT_GATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { INVARIANT_PASSPORT_GATE_CONTRACT } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:37` |\n| `KFD_AGENT_HUB_RELEASE_EVIDENCE_CONTRACT` | constant: const KFD_AGENT_HUB_RELEASE_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_RELEASE_EVIDENCE_CONTRACT } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:38` |\n| `KFD2_RELEASE_TRUST_PASSPORT_CONTRACT` | constant: const KFD2_RELEASE_TRUST_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_RELEASE_TRUST_PASSPORT_CONTRACT } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:35` |\n| `KFD2_TRUST_PROOF_CONTRACT` | constant: const KFD2_TRUST_PROOF_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_TRUST_PROOF_CONTRACT } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:36` |\n| `makeReleasePassportFixtureAssets` | function: function makeReleasePassportFixtureAssets(dir) | dir | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { makeReleasePassportFixtureAssets } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:2841` |\n| `PRODUCT_MECHANISM_CONTRACT` | constant: const PRODUCT_MECHANISM_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PRODUCT_MECHANISM_CONTRACT } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:32` |\n| `readJsonFromLocation` | function: async function readJsonFromLocation(location, redirectCount = 0, { timeoutMs = 15_000 } = {}) | location, redirectCount = 0, { timeoutMs = 15_000 } = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readJsonFromLocation } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:2694` |\n| `RELEASE_CHECK_REPORT_CONTRACT` | constant: const RELEASE_CHECK_REPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_CHECK_REPORT_CONTRACT } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:33` |\n| `RELEASE_EVIDENCE_ATTACHMENT_CONTRACT` | constant: const RELEASE_EVIDENCE_ATTACHMENT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_EVIDENCE_ATTACHMENT_CONTRACT } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:34` |\n| `RELEASE_PASSPORT_CONTRACT` | constant: const RELEASE_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PASSPORT_CONTRACT } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:28` |\n| `sha256File` | function: function sha256File(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write, subprocess | `import { sha256File } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:216` |\n| `sha256Text` | function: function sha256Text(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sha256Text } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:138` |\n| `validateKnownReleasePassportContracts` | function: function validateKnownReleasePassportContracts() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKnownReleasePassportContracts } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:2853` |\n| `verifyReleasePassport` | function: async function verifyReleasePassport({ passportLocation, artifactEvidenceLocation = \"\", publishEvidenceLocation = \"\", impactLocation = \"\", agentIndexLocation = \"\", productMechanismLocation = \"\", kfdAgentHubEvidenceLocation = \"\", kfdSupportEvidenceLocation = \"\", checkedAt = nowIso(), } = {}) | { passportLocation, artifactEvidenceLocation = \"\", publishEvidenceLocation = \"\", impactLocation = \"\", agentIndexLocation = \"\", productMechanismLocation = \"\", kfdAgentHubEvidenceLocation = \"\", kfdSupportEvidenceLocation = \"\", checkedAt = nowIso(), } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyReleasePassport } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:2743` |\n\n## `@kungfu-tech/buildchain/release-passport-contract`\n\nTarget: `./packages/core/release-passport-contract.js`. Public symbols: 5.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `createReleasePassportCheckManifest` | function: function createReleasePassportCheckManifest({ standards = kfdStandards } = {}) | { standards = kfdStandards } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleasePassportCheckManifest } from \"@kungfu-tech/buildchain/release-passport-contract\";` | `packages/core/release-passport-contract.js:147` |\n| `RELEASE_PASSPORT_CHECK_MANIFEST_CONTRACT` | constant: const RELEASE_PASSPORT_CHECK_MANIFEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PASSPORT_CHECK_MANIFEST_CONTRACT } from \"@kungfu-tech/buildchain/release-passport-contract\";` | `packages/core/release-passport-contract.js:9` |\n| `RELEASE_PASSPORT_SCHEMA` | constant: const RELEASE_PASSPORT_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PASSPORT_SCHEMA } from \"@kungfu-tech/buildchain/release-passport-contract\";` | `packages/core/release-passport-contract.js:16` |\n| `RELEASE_PASSPORT_SCHEMA_ID` | constant: const RELEASE_PASSPORT_SCHEMA_ID | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PASSPORT_SCHEMA_ID } from \"@kungfu-tech/buildchain/release-passport-contract\";` | `packages/core/release-passport-contract.js:7` |\n| `validateReleasePassportSchema` | function: function validateReleasePassportSchema(passport) | passport | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateReleasePassportSchema } from \"@kungfu-tech/buildchain/release-passport-contract\";` | `packages/core/release-passport-contract.js:256` |\n\n## `@kungfu-tech/buildchain/release-propagation`\n\nTarget: `./packages/core/release-propagation.js`. Public symbols: 31.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `claimReleasePropagationWork` | function: function claimReleasePropagationWork({ work, expectedWorkRoot, authority, familyState, } = {}) | { work, expectedWorkRoot, authority, familyState, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { claimReleasePropagationWork } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-work-transitions.js:17` |\n| `completeReleasePropagationWork` | function: function completeReleasePropagationWork({ work, expectedWorkRoot, receipt, completionDecision, } = {}) | { work, expectedWorkRoot, receipt, completionDecision, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { completeReleasePropagationWork } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-work-transitions.js:110` |\n| `createManualUpstreamPickupCapture` | function: function createManualUpstreamPickupCapture({ plan, expectedDownstreamBaseSha, }) | { plan, expectedDownstreamBaseSha, } | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createManualUpstreamPickupCapture } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-pickup.js:361` |\n| `createManualUpstreamPickupPlan` | function: function createManualUpstreamPickupPlan({ config: configInput, sourceId, channel, currentVersion, upstreamRelease, }) | { config: configInput, sourceId, channel, currentVersion, upstreamRelease, } | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createManualUpstreamPickupPlan } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-pickup.js:303` |\n| `createPackageReleasePropagationCapture` | function: function createPackageReleasePropagationCapture({ config: configInput, upstreamRelease: upstreamReleaseInput, expectedBaseShas = {}, } = {}) | { config: configInput, upstreamRelease: upstreamReleaseInput, expectedBaseShas = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPackageReleasePropagationCapture } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-capture.js:101` |\n| `createReleasePropagationLock` | function: function createReleasePropagationLock({ graph, edge, sourceNode, targetNode, upstreamRelease, downstreamChannel, } = {}) | { graph, edge, sourceNode, targetNode, upstreamRelease, downstreamChannel, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleasePropagationLock } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation.js:199` |\n| `createReleasePropagationReceipt` | function: function createReleasePropagationReceipt({ plan, target = \"\", lockResult, prOutcome, stagingState = \"pending\", productionState = \"not-requested\", observedAt = \"\", } = {}) | { plan, target = \"\", lockResult, prOutcome, stagingState = \"pending\", productionState = \"not-requested\", observedAt = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleasePropagationReceipt } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation.js:371` |\n| `createReleasePropagationStageReceipt` | function: function createReleasePropagationStageReceipt({ work, stage, outcome = \"success\", observedAt, actor, summary, evidence, failure = null, } = {}) | { work, stage, outcome = \"success\", observedAt, actor, summary, evidence, failure = null, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleasePropagationStageReceipt } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-work.js:214` |\n| `createReleasePropagationWork` | function: function createReleasePropagationWork({ plan, target = \"\", workContext, expectedDownstreamBaseSha, } = {}) | { plan, target = \"\", workContext, expectedDownstreamBaseSha, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleasePropagationWork } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-work.js:111` |\n| `MANUAL_UPSTREAM_PICKUP_CONFIG_CONTRACT` | constant: const MANUAL_UPSTREAM_PICKUP_CONFIG_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { MANUAL_UPSTREAM_PICKUP_CONFIG_CONTRACT } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-pickup.js:16` |\n| `MANUAL_UPSTREAM_PICKUP_PLAN_CONTRACT` | constant: const MANUAL_UPSTREAM_PICKUP_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { MANUAL_UPSTREAM_PICKUP_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-pickup.js:18` |\n| `normalizeManualUpstreamPickupConfig` | function: function normalizeManualUpstreamPickupConfig(input) | input | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeManualUpstreamPickupConfig } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-pickup.js:118` |\n| `normalizePackageReleasePropagationConfig` | function: function normalizePackageReleasePropagationConfig(input) | input | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizePackageReleasePropagationConfig } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-capture.js:63` |\n| `normalizeReleasePropagationGraph` | function: function normalizeReleasePropagationGraph(input) | input | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeReleasePropagationGraph } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation.js:163` |\n| `PACKAGE_RELEASE_PROPAGATION_CONFIG_CONTRACT` | constant: const PACKAGE_RELEASE_PROPAGATION_CONFIG_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PACKAGE_RELEASE_PROPAGATION_CONFIG_CONTRACT } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-capture.js:17` |\n| `planReleasePropagation` | function: function planReleasePropagation({ graph: graphInput, upstreamRelease: releaseInput, sourceNode = \"\" } = {}) | { graph: graphInput, upstreamRelease: releaseInput, sourceNode = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { planReleasePropagation } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation.js:249` |\n| `readReleasePropagationJson` | function: function readReleasePropagationJson(value, { cwd = process.cwd(), label = \"json\" } = {}) | value, { cwd = process.cwd(), label = \"json\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readReleasePropagationJson } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation.js:305` |\n| `recordReleasePropagationStage` | function: function recordReleasePropagationStage({ work, expectedWorkRoot, receipt } = {}) | { work, expectedWorkRoot, receipt } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { recordReleasePropagationStage } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-work-transitions.js:45` |\n| `RELEASE_PROPAGATION_GRAPH_CONTRACT` | constant: const RELEASE_PROPAGATION_GRAPH_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_GRAPH_CONTRACT } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation.js:15` |\n| `RELEASE_PROPAGATION_LOCK_CONTRACT` | constant: const RELEASE_PROPAGATION_LOCK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_LOCK_CONTRACT } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation.js:17` |\n| `RELEASE_PROPAGATION_PLAN_CONTRACT` | value: RELEASE_PROPAGATION_PLAN_CONTRACT | none | unknown | No narrower error contract was mechanically discoverable. | unknown | `import { RELEASE_PROPAGATION_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation.js:1` |\n| `RELEASE_PROPAGATION_RECEIPT_CONTRACT` | constant: const RELEASE_PROPAGATION_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation.js:18` |\n| `RELEASE_PROPAGATION_STAGE_RECEIPT_CONTRACT` | constant: const RELEASE_PROPAGATION_STAGE_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_STAGE_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-work-constants.js:2` |\n| `RELEASE_PROPAGATION_WORK_CONTRACT` | constant: const RELEASE_PROPAGATION_WORK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_WORK_CONTRACT } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-work-constants.js:1` |\n| `RELEASE_PROPAGATION_WORK_STAGES` | constant: const RELEASE_PROPAGATION_WORK_STAGES | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_WORK_STAGES } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-work-constants.js:4` |\n| `repairReleasePropagationWork` | function: function repairReleasePropagationWork({ work, expectedWorkRoot, receipt } = {}) | { work, expectedWorkRoot, receipt } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { repairReleasePropagationWork } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-work-transitions.js:88` |\n| `resolveNpmRegistryRelease` | function: function resolveNpmRegistryRelease({ source: sourceInput, channel, packageMetadata, attestations, }) | { source: sourceInput, channel, packageMetadata, attestations, } | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveNpmRegistryRelease } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-pickup.js:167` |\n| `resolvePropagationChannel` | function: function resolvePropagationChannel(edge, upstreamChannel) | edge, upstreamChannel | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolvePropagationChannel } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation.js:190` |\n| `resumeReleasePropagationWork` | function: function resumeReleasePropagationWork(work) | work | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resumeReleasePropagationWork } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-work.js:518` |\n| `verifyReleasePropagationWork` | function: function verifyReleasePropagationWork(input) | input | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyReleasePropagationWork } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-work.js:486` |\n| `writeReleasePropagationLock` | function: function writeReleasePropagationLock({ plan, target = \"\", cwd = process.cwd(), output = \"\" } = {}) | { plan, target = \"\", cwd = process.cwd(), output = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { writeReleasePropagationLock } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation.js:317` |\n\n## `@kungfu-tech/buildchain/release-activation-transaction`\n\nTarget: `./packages/core/release-activation-transaction.js`. Public symbols: 11.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `abortReleaseActivationTransaction` | function: function abortReleaseActivationTransaction(transaction, reason) | transaction, reason | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { abortReleaseActivationTransaction } from \"@kungfu-tech/buildchain/release-activation-transaction\";` | `packages/core/release-activation-transaction.js:277` |\n| `createReleaseActivationReceiptSet` | function: function createReleaseActivationReceiptSet({ transaction, receipts = [], } = {}) | { transaction, receipts = [], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleaseActivationReceiptSet } from \"@kungfu-tech/buildchain/release-activation-transaction\";` | `packages/core/release-activation-transaction.js:311` |\n| `createReleaseActivationTransaction` | function: function createReleaseActivationTransaction({ transactionId, mode = \"shadow\", bindings, owners, } = {}) | { transactionId, mode = \"shadow\", bindings, owners, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleaseActivationTransaction } from \"@kungfu-tech/buildchain/release-activation-transaction\";` | `packages/core/release-activation-transaction.js:103` |\n| `recordReleaseActivationPhase` | function: function recordReleaseActivationPhase(transaction, phaseId, { receiptRoots = [], failure = \"\" } = {}) | transaction, phaseId, { receiptRoots = [], failure = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { recordReleaseActivationPhase } from \"@kungfu-tech/buildchain/release-activation-transaction\";` | `packages/core/release-activation-transaction.js:217` |\n| `RELEASE_ACTIVATION_CONTRACT` | constant: const RELEASE_ACTIVATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_ACTIVATION_CONTRACT } from \"@kungfu-tech/buildchain/release-activation-transaction\";` | `packages/core/release-activation-transaction.js:3` |\n| `RELEASE_ACTIVATION_PHASES` | constant: const RELEASE_ACTIVATION_PHASES | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_ACTIVATION_PHASES } from \"@kungfu-tech/buildchain/release-activation-transaction\";` | `packages/core/release-activation-transaction.js:8` |\n| `RELEASE_ACTIVATION_RECEIPT_SET_CONTRACT` | constant: const RELEASE_ACTIVATION_RECEIPT_SET_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_ACTIVATION_RECEIPT_SET_CONTRACT } from \"@kungfu-tech/buildchain/release-activation-transaction\";` | `packages/core/release-activation-transaction.js:5` |\n| `releaseActivationRoot` | function: function releaseActivationRoot(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { releaseActivationRoot } from \"@kungfu-tech/buildchain/release-activation-transaction\";` | `packages/core/release-activation-transaction.js:38` |\n| `rollbackReleaseActivationTransaction` | function: function rollbackReleaseActivationTransaction(transaction, { toSiteSourceSha, reason } = {}) | transaction, { toSiteSourceSha, reason } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { rollbackReleaseActivationTransaction } from \"@kungfu-tech/buildchain/release-activation-transaction\";` | `packages/core/release-activation-transaction.js:290` |\n| `validateReleaseActivationReceiptSet` | function: function validateReleaseActivationReceiptSet(receiptSet, { allowShadow = true } = {}) | receiptSet, { allowShadow = true } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateReleaseActivationReceiptSet } from \"@kungfu-tech/buildchain/release-activation-transaction\";` | `packages/core/release-activation-transaction.js:376` |\n| `validateReleaseActivationTransaction` | function: function validateReleaseActivationTransaction(transaction) | transaction | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateReleaseActivationTransaction } from \"@kungfu-tech/buildchain/release-activation-transaction\";` | `packages/core/release-activation-transaction.js:146` |\n\n## `@kungfu-tech/buildchain/surface-manifest`\n\nTarget: `./packages/core/surface-manifest.js`. Public symbols: 3.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `applySurfaceTimestampPolicy` | function: function applySurfaceTimestampPolicy(manifest, options = {}) | manifest, options = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { applySurfaceTimestampPolicy } from \"@kungfu-tech/buildchain/surface-manifest\";` | `packages/core/surface-manifest.js:79` |\n| `createSurfaceTimestampPolicy` | function: function createSurfaceTimestampPolicy({ generatedAt = \"\", publishedAt = \"\", sourceDateEpoch = process.env.SOURCE_DATE_EPOCH \\|\\| DEFAULT_SOURCE_DATE_EPOCH, sourceRevision = \"\", deterministicInputs = [], timestampPolicy = \"\", timestampFields = [\"generatedAt\", \"publishedAt\"], timestampFieldsParticipateInArtifactDigest = true, artifactDigestScope = \"manifest-and-artifact\", reproducible = true, } = {}) | { generatedAt = \"\", publishedAt = \"\", sourceDateEpoch = process.env.SOURCE_DATE_EPOCH \\|\\| DEFAULT_SOURCE_DATE_EPOCH, sourceRevision = \"\", deterministicInputs = [], timestampPolicy = \"\", timestampFields = [\"generatedAt\", \"publishedAt\"], timestampFieldsParticipateInArtifactDigest = true, artifactDigestScope = \"manifest-and-artifact\", reproducible = true, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createSurfaceTimestampPolicy } from \"@kungfu-tech/buildchain/surface-manifest\";` | `packages/core/surface-manifest.js:34` |\n| `SURFACE_TIMESTAMP_POLICY_CONTRACT` | constant: const SURFACE_TIMESTAMP_POLICY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { SURFACE_TIMESTAMP_POLICY_CONTRACT } from \"@kungfu-tech/buildchain/surface-manifest\";` | `packages/core/surface-manifest.js:1` |\n\n## `@kungfu-tech/buildchain/buildchain-kfd-claims`\n\nTarget: `./packages/core/buildchain-kfd-claims.js`. Public symbols: 10.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `BUILDCHAIN_AGENT_MANUALS` | constant: const BUILDCHAIN_AGENT_MANUALS | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_AGENT_MANUALS } from \"@kungfu-tech/buildchain/buildchain-kfd-claims\";` | `packages/core/buildchain-agent-manuals.js:1` |\n| `BUILDCHAIN_KFD_CLAIM_REGISTRY_CONTRACT` | constant: const BUILDCHAIN_KFD_CLAIM_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD_CLAIM_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain/buildchain-kfd-claims\";` | `packages/core/buildchain-kfd-claims.js:14` |\n| `BUILDCHAIN_KFD_COLLABORATION_INTERFACE_CONTRACT` | constant: const BUILDCHAIN_KFD_COLLABORATION_INTERFACE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD_COLLABORATION_INTERFACE_CONTRACT } from \"@kungfu-tech/buildchain/buildchain-kfd-claims\";` | `packages/core/buildchain-kfd-claims.js:15` |\n| `createBuildchainKfd1Witness` | function: function createBuildchainKfd1Witness({ root = process.cwd(), sourceSha = \"\" } = {}) | { root = process.cwd(), sourceSha = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfd1Witness } from \"@kungfu-tech/buildchain/buildchain-kfd-claims\";` | `packages/core/buildchain-kfd-claims.js:530` |\n| `createBuildchainKfd2Claims` | function: function createBuildchainKfd2Claims({ root = process.cwd(), witnessFiles = {} } = {}) | { root = process.cwd(), witnessFiles = {} } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfd2Claims } from \"@kungfu-tech/buildchain/buildchain-kfd-claims\";` | `packages/core/buildchain-kfd-claims.js:687` |\n| `createBuildchainKfd3ArtifactWitness` | function: function createBuildchainKfd3ArtifactWitness({ root = process.cwd(), sourceSha = \"\" } = {}) | { root = process.cwd(), sourceSha = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfd3ArtifactWitness } from \"@kungfu-tech/buildchain/buildchain-kfd-claims\";` | `packages/core/buildchain-kfd-claims.js:647` |\n| `createBuildchainKfd3PrebuildWitness` | function: function createBuildchainKfd3PrebuildWitness({ root = process.cwd(), sourceSha = \"\" } = {}) | { root = process.cwd(), sourceSha = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfd3PrebuildWitness } from \"@kungfu-tech/buildchain/buildchain-kfd-claims\";` | `packages/core/buildchain-kfd-claims.js:583` |\n| `createBuildchainKfdClaimRegistry` | function: function createBuildchainKfdClaimRegistry({ root = process.cwd(), sourceSha = \"\" } = {}) | { root = process.cwd(), sourceSha = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfdClaimRegistry } from \"@kungfu-tech/buildchain/buildchain-kfd-claims\";` | `packages/core/buildchain-kfd-claims.js:510` |\n| `createBuildchainKfdSurfaceRegistry` | function: function createBuildchainKfdSurfaceRegistry({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfdSurfaceRegistry } from \"@kungfu-tech/buildchain/buildchain-kfd-claims\";` | `packages/core/buildchain-kfd-claims.js:411` |\n| `createBuildchainPublicClaimDefinitions` | function: function createBuildchainPublicClaimDefinitions() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainPublicClaimDefinitions } from \"@kungfu-tech/buildchain/buildchain-kfd-claims\";` | `packages/core/buildchain-kfd-claims.js:226` |"
+      "markdown": "---\nstatus: active\nperiod: ongoing\ntheme: buildchain-generated-reference\ndoc_type: technical-reference\nsource_level: local-files\nconfidence: high\nsensitivity: public\nevidence_grade: A\nreview_state: generated\nlast_reviewed: 2026-08-01\nai_provenance:\n  model_family: GPT-5\n  product: Codex\n  generated_at: 2026-08-01\n  invisible_context: not asserted\n---\n\n# Buildchain Node API Reference\n\n> Generated from `package.json#exports` and the exported ESM symbols in each target. Do not edit this file by hand.\n\nSignatures and source locations are mechanical. JavaScript return types remain conservative where the source declares no static type.\n\n## `@kungfu-tech/buildchain`\n\nTarget: `./packages/core/index.js`. Public symbols: 558.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `abortReleaseActivationTransaction` | function: function abortReleaseActivationTransaction(transaction, reason) | transaction, reason | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { abortReleaseActivationTransaction } from \"@kungfu-tech/buildchain\";` | `packages/core/release-activation-transaction.js:277` |\n| `AGENT_INDEX_CONTRACT` | constant: const AGENT_INDEX_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { AGENT_INDEX_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:31` |\n| `aggregateBuildFacts` | function: function aggregateBuildFacts({ cwd = process.cwd(), productId = \"\", moduleFacts = [], artifacts = [], now = nowIso(), } = {}) | { cwd = process.cwd(), productId = \"\", moduleFacts = [], artifacts = [], now = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | subprocess | `import { aggregateBuildFacts } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:458` |\n| `aggregateControllerReceipts` | function: function aggregateControllerReceipts({ plans = [], receipts = [] } = {}) | { plans = [], receipts = [] } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { aggregateControllerReceipts } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:448` |\n| `ANCHORED_VERSION_MATERIAL_CONTRACT` | constant: const ANCHORED_VERSION_MATERIAL_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ANCHORED_VERSION_MATERIAL_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/anchored-version-material.js:15` |\n| `appendBuildchainLogEvent` | function: function appendBuildchainLogEvent(filePath, event) | filePath, event | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { appendBuildchainLogEvent } from \"@kungfu-tech/buildchain\";` | `packages/core/logging.js:67` |\n| `applySurfaceTimestampPolicy` | function: function applySurfaceTimestampPolicy(manifest, options = {}) | manifest, options = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { applySurfaceTimestampPolicy } from \"@kungfu-tech/buildchain\";` | `packages/core/surface-manifest.js:79` |\n| `ARTIFACT_EVIDENCE_CONTRACT` | constant: const ARTIFACT_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_EVIDENCE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:29` |\n| `ARTIFACT_PASSPORT_LOCATOR_CONTRACT` | constant: const ARTIFACT_PASSPORT_LOCATOR_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_PASSPORT_LOCATOR_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-passport.js:11` |\n| `ARTIFACT_PASSPORT_POINTER_CONTRACT` | constant: const ARTIFACT_PASSPORT_POINTER_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_PASSPORT_POINTER_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-passport.js:10` |\n| `ARTIFACT_SIGNING_AUTHORITY_CONTRACT` | constant: const ARTIFACT_SIGNING_AUTHORITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_SIGNING_AUTHORITY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing.js:7` |\n| `ARTIFACT_SIGNING_RECEIPT_CONTRACT` | constant: const ARTIFACT_SIGNING_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_SIGNING_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing.js:5` |\n| `ARTIFACT_SIGNING_REQUEST_CONTRACT` | constant: const ARTIFACT_SIGNING_REQUEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_SIGNING_REQUEST_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing.js:3` |\n| `ARTIFACT_SIGNING_RESULT_CONTRACT` | constant: const ARTIFACT_SIGNING_RESULT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_SIGNING_RESULT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing-result.js:12` |\n| `ARTIFACT_VERIFICATION_CONTRACT` | constant: const ARTIFACT_VERIFICATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_VERIFICATION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-passport.js:9` |\n| `ARTIFACT_VERIFICATION_ENVELOPE_CHECK_CONTRACT` | constant: const ARTIFACT_VERIFICATION_ENVELOPE_CHECK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_VERIFICATION_ENVELOPE_CHECK_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-verification-envelope.js:5` |\n| `ARTIFACT_VERIFICATION_ENVELOPE_CONTRACT` | constant: const ARTIFACT_VERIFICATION_ENVELOPE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_VERIFICATION_ENVELOPE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-verification-envelope.js:3` |\n| `artifactSigningDigest` | function: function artifactSigningDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { artifactSigningDigest } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing.js:60` |\n| `artifactSigningEvidenceDigest` | function: function artifactSigningEvidenceDigest(evidence = []) | evidence = [] | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { artifactSigningEvidenceDigest } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing-result.js:58` |\n| `artifactVerificationEnvelopeDigest` | function: function artifactVerificationEnvelopeDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { artifactVerificationEnvelopeDigest } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-verification-envelope.js:50` |\n| `assertPackageManager` | function: function assertPackageManager(manager) | manager | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { assertPackageManager } from \"@kungfu-tech/buildchain\";` | `packages/core/package-manager.js:49` |\n| `assertPublicSurfaceReverseAudit` | function: function assertPublicSurfaceReverseAudit(report) | report | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { assertPublicSurfaceReverseAudit } from \"@kungfu-tech/buildchain\";` | `packages/core/public-surface-audit.js:261` |\n| `auditKfd3Surfaces` | function: function auditKfd3Surfaces({ cwd = process.cwd(), registryPath = \"\", kinds = [], artifactPath = \"\", } = {}) | { cwd = process.cwd(), registryPath = \"\", kinds = [], artifactPath = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { auditKfd3Surfaces } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd3-surface-register.js:547` |\n| `BADGE_BUNDLE_DEFAULT_CLAIMS` | constant: const BADGE_BUNDLE_DEFAULT_CLAIMS | none | value | Import does not declare a throw contract. | none-on-import | `import { BADGE_BUNDLE_DEFAULT_CLAIMS } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:17` |\n| `BADGE_BUNDLE_FACTS_CONTRACT` | constant: const BADGE_BUNDLE_FACTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BADGE_BUNDLE_FACTS_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:13` |\n| `BUILD_FACTS_GIT_CONTRACT` | constant: const BUILD_FACTS_GIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_GIT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:9` |\n| `BUILD_FACTS_LEGACY_KUNGFU_BUILDINFO_CONTRACT` | constant: const BUILD_FACTS_LEGACY_KUNGFU_BUILDINFO_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_LEGACY_KUNGFU_BUILDINFO_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:14` |\n| `BUILD_FACTS_MODULE_CONTRACT` | constant: const BUILD_FACTS_MODULE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_MODULE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:11` |\n| `BUILD_FACTS_PRODUCT_CONTRACT` | constant: const BUILD_FACTS_PRODUCT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_PRODUCT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:12` |\n| `BUILD_FACTS_VERIFY_CONTRACT` | constant: const BUILD_FACTS_VERIFY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_VERIFY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:13` |\n| `BUILD_FACTS_VERSION_CONTRACT` | constant: const BUILD_FACTS_VERSION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_VERSION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:10` |\n| `BUILDCHAIN_AGENT_MANUALS` | constant: const BUILDCHAIN_AGENT_MANUALS | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_AGENT_MANUALS } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-agent-manuals.js:1` |\n| `BUILDCHAIN_ANCHORED_PACKAGE_RELEASE_VALIDATION_CONTRACT` | constant: const BUILDCHAIN_ANCHORED_PACKAGE_RELEASE_VALIDATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_ANCHORED_PACKAGE_RELEASE_VALIDATION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:31` |\n| `BUILDCHAIN_CACHE_EVIDENCE_SET_CONTRACT` | constant: const BUILDCHAIN_CACHE_EVIDENCE_SET_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CACHE_EVIDENCE_SET_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/cache-evidence.js:5` |\n| `BUILDCHAIN_CACHE_OPERATION_RECEIPT_CONTRACT` | constant: const BUILDCHAIN_CACHE_OPERATION_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CACHE_OPERATION_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/cache-evidence.js:3` |\n| `BUILDCHAIN_CANDIDATE_TIMELINE_CONTRACT` | constant: const BUILDCHAIN_CANDIDATE_TIMELINE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CANDIDATE_TIMELINE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/candidate-timeline.js:1` |\n| `BUILDCHAIN_CANDIDATE_TIMELINE_EVENT_CONTRACT` | constant: const BUILDCHAIN_CANDIDATE_TIMELINE_EVENT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CANDIDATE_TIMELINE_EVENT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/candidate-timeline.js:3` |\n| `BUILDCHAIN_CONFIG_PATH` | constant: const BUILDCHAIN_CONFIG_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONFIG_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:7` |\n| `BUILDCHAIN_CONSUMER_ISSUE_CONTRACT` | constant: const BUILDCHAIN_CONSUMER_ISSUE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONSUMER_ISSUE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:4` |\n| `BUILDCHAIN_CONTRACT_LOCK` | constant: const BUILDCHAIN_CONTRACT_LOCK | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTRACT_LOCK } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-contract.js:8` |\n| `BUILDCHAIN_CONTRACT_LOCK_PATH` | constant: const BUILDCHAIN_CONTRACT_LOCK_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTRACT_LOCK_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:9` |\n| `BUILDCHAIN_CONTROLLER_AGGREGATE_CONTRACT` | constant: const BUILDCHAIN_CONTROLLER_AGGREGATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTROLLER_AGGREGATE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:6` |\n| `BUILDCHAIN_CONTROLLER_DESCRIPTOR_CONTRACT` | constant: const BUILDCHAIN_CONTROLLER_DESCRIPTOR_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTROLLER_DESCRIPTOR_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:4` |\n| `BUILDCHAIN_CONTROLLER_EVIDENCE_CONTRACT` | constant: const BUILDCHAIN_CONTROLLER_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTROLLER_EVIDENCE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:3` |\n| `BUILDCHAIN_CONTROLLER_REGISTRY_CONTRACT` | constant: const BUILDCHAIN_CONTROLLER_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTROLLER_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:5` |\n| `BUILDCHAIN_DIAGNOSTICS_CONTRACT` | constant: const BUILDCHAIN_DIAGNOSTICS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_DIAGNOSTICS_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:28` |\n| `BUILDCHAIN_DIAGNOSTICS_MANIFEST_CONTRACT` | constant: const BUILDCHAIN_DIAGNOSTICS_MANIFEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_DIAGNOSTICS_MANIFEST_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:33` |\n| `BUILDCHAIN_DIAGNOSTICS_SUMMARY_CONTRACT` | constant: const BUILDCHAIN_DIAGNOSTICS_SUMMARY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_DIAGNOSTICS_SUMMARY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:35` |\n| `BUILDCHAIN_DIR` | constant: const BUILDCHAIN_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_DIR } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:4` |\n| `BUILDCHAIN_GENERATED_DIRS` | constant: const BUILDCHAIN_GENERATED_DIRS | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_GENERATED_DIRS } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:36` |\n| `BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY` | constant: const BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:1363` |\n| `BUILDCHAIN_GITHUB_GOVERNANCE_PROTECTED_PATHS` | constant: const BUILDCHAIN_GITHUB_GOVERNANCE_PROTECTED_PATHS | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_GITHUB_GOVERNANCE_PROTECTED_PATHS } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:1365` |\n| `BUILDCHAIN_JSON_FORMATTING_POLICY` | constant: const BUILDCHAIN_JSON_FORMATTING_POLICY | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_JSON_FORMATTING_POLICY } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:14` |\n| `BUILDCHAIN_KFD_CLAIM_REGISTRY_CONTRACT` | constant: const BUILDCHAIN_KFD_CLAIM_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD_CLAIM_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-kfd-claims.js:14` |\n| `BUILDCHAIN_KFD_COLLABORATION_INTERFACE_CONTRACT` | constant: const BUILDCHAIN_KFD_COLLABORATION_INTERFACE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD_COLLABORATION_INTERFACE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-kfd-claims.js:15` |\n| `BUILDCHAIN_KFD_ROOT` | constant: const BUILDCHAIN_KFD_ROOT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD_ROOT } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:11` |\n| `BUILDCHAIN_KFD1_CONTRACT_WORLD_WITNESS_PATH` | constant: const BUILDCHAIN_KFD1_CONTRACT_WORLD_WITNESS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD1_CONTRACT_WORLD_WITNESS_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:16` |\n| `BUILDCHAIN_KFD1_DIR` | constant: const BUILDCHAIN_KFD1_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD1_DIR } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:12` |\n| `BUILDCHAIN_KFD1_RELEASE_GATE_PATH` | constant: const BUILDCHAIN_KFD1_RELEASE_GATE_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD1_RELEASE_GATE_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:17` |\n| `BUILDCHAIN_KFD1_VERIFY_RESULT_PATH` | constant: const BUILDCHAIN_KFD1_VERIFY_RESULT_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD1_VERIFY_RESULT_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:18` |\n| `BUILDCHAIN_KFD2_CLAIM_ARGS_PATH` | constant: const BUILDCHAIN_KFD2_CLAIM_ARGS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_CLAIM_ARGS_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:21` |\n| `BUILDCHAIN_KFD2_CLAIMS_DIR` | constant: const BUILDCHAIN_KFD2_CLAIMS_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_CLAIMS_DIR } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:22` |\n| `BUILDCHAIN_KFD2_DIR` | constant: const BUILDCHAIN_KFD2_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_DIR } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:13` |\n| `BUILDCHAIN_KFD2_REGISTRY_PATH` | constant: const BUILDCHAIN_KFD2_REGISTRY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_REGISTRY_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:19` |\n| `BUILDCHAIN_KFD2_RELEASE_CLAIMS_PATH` | constant: const BUILDCHAIN_KFD2_RELEASE_CLAIMS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_RELEASE_CLAIMS_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:20` |\n| `BUILDCHAIN_KFD3_ARTIFACT_WITNESS_PATH` | constant: const BUILDCHAIN_KFD3_ARTIFACT_WITNESS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_ARTIFACT_WITNESS_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:26` |\n| `BUILDCHAIN_KFD3_CAPABILITY_QUERY_PATH` | constant: const BUILDCHAIN_KFD3_CAPABILITY_QUERY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_CAPABILITY_QUERY_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:27` |\n| `BUILDCHAIN_KFD3_COLLABORATION_INTERFACE_PATH` | constant: const BUILDCHAIN_KFD3_COLLABORATION_INTERFACE_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_COLLABORATION_INTERFACE_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:24` |\n| `BUILDCHAIN_KFD3_DIR` | constant: const BUILDCHAIN_KFD3_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_DIR } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:14` |\n| `BUILDCHAIN_KFD3_PREBUILD_WITNESS_PATH` | constant: const BUILDCHAIN_KFD3_PREBUILD_WITNESS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_PREBUILD_WITNESS_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:25` |\n| `BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH` | constant: const BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:23` |\n| `BUILDCHAIN_KFD4_DIR` | constant: const BUILDCHAIN_KFD4_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD4_DIR } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:15` |\n| `BUILDCHAIN_LAYOUT_DISCOVERY_CONTRACT` | constant: const BUILDCHAIN_LAYOUT_DISCOVERY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LAYOUT_DISCOVERY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:6` |\n| `BUILDCHAIN_LIFECYCLE_OBSERVABILITY_CONTRACT` | constant: const BUILDCHAIN_LIFECYCLE_OBSERVABILITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LIFECYCLE_OBSERVABILITY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:29` |\n| `BUILDCHAIN_LOCKED_SOURCE_CHECKOUT_CONTRACT` | constant: const BUILDCHAIN_LOCKED_SOURCE_CHECKOUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LOCKED_SOURCE_CHECKOUT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:41` |\n| `BUILDCHAIN_LOG_EVENT_CONTRACT` | constant: const BUILDCHAIN_LOG_EVENT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LOG_EVENT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/logging.js:6` |\n| `BUILDCHAIN_LOG_SUMMARY_CONTRACT` | constant: const BUILDCHAIN_LOG_SUMMARY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LOG_SUMMARY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/logging.js:7` |\n| `BUILDCHAIN_PROCESS_SAMPLE_REPORT_CONTRACT` | constant: const BUILDCHAIN_PROCESS_SAMPLE_REPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_PROCESS_SAMPLE_REPORT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:37` |\n| `BUILDCHAIN_PROCESS_SAMPLE_SUMMARY_CONTRACT` | constant: const BUILDCHAIN_PROCESS_SAMPLE_SUMMARY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_PROCESS_SAMPLE_SUMMARY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:39` |\n| `BUILDCHAIN_PUBLIC_SURFACE_AUDIT_CONTRACT` | constant: const BUILDCHAIN_PUBLIC_SURFACE_AUDIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_PUBLIC_SURFACE_AUDIT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/public-surface-audit.js:12` |\n| `BUILDCHAIN_RELEASE_PASSPORT_PATH` | constant: const BUILDCHAIN_RELEASE_PASSPORT_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_RELEASE_PASSPORT_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:33` |\n| `BUILDCHAIN_RUNTIME_CONTRACT_WORLD` | constant: const BUILDCHAIN_RUNTIME_CONTRACT_WORLD | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_RUNTIME_CONTRACT_WORLD } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-contract.js:7` |\n| `BUILDCHAIN_VERSION_PIN_PATH` | constant: const BUILDCHAIN_VERSION_PIN_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_VERSION_PIN_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:5` |\n| `BUILDCHAIN_WORKFLOW_FRICTION_ISSUE_CONTRACT` | constant: const BUILDCHAIN_WORKFLOW_FRICTION_ISSUE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_WORKFLOW_FRICTION_ISSUE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:5` |\n| `buildchainKfdClaims` | constant: const buildchainKfdClaims | none | value | Import does not declare a throw contract. | none-on-import | `import { buildchainKfdClaims } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd.js:896` |\n| `buildchainPublicationAuthorityDescriptors` | function: function buildchainPublicationAuthorityDescriptors() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { buildchainPublicationAuthorityDescriptors } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-publication-authority.js:54` |\n| `buildConsumerIssueReport` | function: function buildConsumerIssueReport(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { buildConsumerIssueReport } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:104` |\n| `buildFactsDigest` | function: function buildFactsDigest(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write, subprocess | `import { buildFactsDigest } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:45` |\n| `buildWorkflowFrictionIssueReport` | function: function buildWorkflowFrictionIssueReport(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { buildWorkflowFrictionIssueReport } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:199` |\n| `cacheEvidenceDigest` | function: function cacheEvidenceDigest(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { cacheEvidenceDigest } from \"@kungfu-tech/buildchain\";` | `packages/core/cache-evidence.js:48` |\n| `CHANNEL_CANDIDATE_DECISION_SCHEMA` | constant: const CHANNEL_CANDIDATE_DECISION_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { CHANNEL_CANDIDATE_DECISION_SCHEMA } from \"@kungfu-tech/buildchain\";` | `packages/core/channel-candidate.js:5` |\n| `channelCandidateSourceLockRef` | function: function channelCandidateSourceLockRef(targetBranch, sourceSha) | targetBranch, sourceSha | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { channelCandidateSourceLockRef } from \"@kungfu-tech/buildchain\";` | `packages/core/channel-candidate.js:84` |\n| `checkBadgeBundleBlock` | function: function checkBadgeBundleBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkBadgeBundleBlock } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:867` |\n| `checkHomebrewTap` | function: async function checkHomebrewTap({ cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", } = {}) | { cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkHomebrewTap } from \"@kungfu-tech/buildchain\";` | `packages/core/homebrew.js:335` |\n| `checkKfd2ProductClaimOutputs` | function: function checkKfd2ProductClaimOutputs(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkKfd2ProductClaimOutputs } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd2-product-claims.js:415` |\n| `checkReadmeBadgeBlock` | function: function checkReadmeBadgeBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkReadmeBadgeBlock } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:848` |\n| `claimReleasePropagationWork` | function: function claimReleasePropagationWork({ work, expectedWorkRoot, authority, familyState, } = {}) | { work, expectedWorkRoot, authority, familyState, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { claimReleasePropagationWork } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-work-transitions.js:17` |\n| `classifyProcessCommand` | function: function classifyProcessCommand(command = \"\") | command = \"\" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { classifyProcessCommand } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:1085` |\n| `classifyReleasePropagationCondition` | function: function classifyReleasePropagationCondition(condition) | condition | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { classifyReleasePropagationCondition } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-agent-entry.js:171` |\n| `codeownersForPath` | function: function codeownersForPath(source, candidatePath) | source, candidatePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { codeownersForPath } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:417` |\n| `collectBadgeBundleFacts` | function: async function collectBadgeBundleFacts({ cwd = process.cwd(), claims = undefined } = {}) | { cwd = process.cwd(), claims = undefined } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectBadgeBundleFacts } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:790` |\n| `collectBuildchainDiagnostics` | function: function collectBuildchainDiagnostics({ cwd = process.cwd(), artifactPaths = [] } = {}) | { cwd = process.cwd(), artifactPaths = [] } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectBuildchainDiagnostics } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:248` |\n| `collectCacheDiagnostics` | function: function collectCacheDiagnostics({ cwd = process.cwd(), cacheDirs = [], runCommand = defaultDiagnosticCommandRunner } = {}) | { cwd = process.cwd(), cacheDirs = [], runCommand = defaultDiagnosticCommandRunner } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectCacheDiagnostics } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:922` |\n| `collectCompilerCacheDiagnostics` | function: function collectCompilerCacheDiagnostics({ cwd = process.cwd(), runCommand = defaultDiagnosticCommandRunner, env = process.env, } = {}) | { cwd = process.cwd(), runCommand = defaultDiagnosticCommandRunner, env = process.env, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectCompilerCacheDiagnostics } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:573` |\n| `collectGitDiagnostics` | function: function collectGitDiagnostics({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectGitDiagnostics } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:944` |\n| `collectGitHubReleasePassport` | function: function collectGitHubReleasePassport({ cwd = process.cwd(), tag = \"\", repository = process.env.GITHUB_REPOSITORY \\|\\| \"\", sourceSha = process.env.GITHUB_SHA \\|\\| \"\", line = \"\", outputDir = \".buildchain/release-passport\", assetsJson = \"\", assetsDir = \"\", releaseJson = \"\", productName = \"Buildchain\", packageName = \"@kungfu-tech/buildchain\", packageVersion = \"\", packageSetJson = \"\", publishEvidenceJson = \"\", trustedPublishingJson = \"\", transactionJson = \"\", anchorManifestJson = \"\", versionMaterialJson = \"\", impactJson = \"\", buildSummaryJson = \"\", buildFactsJsons = [], platformManifestJsons = [], distTagEvidenceJson = \"\", kfd1WitnessJsons = [], kfd2ClaimJsons = [], kfd3PrebuildWitnessJsons = [], kfd3ArtifactWitnessJsons = [], kfd3ArtifactVerifyCommand = \"\", kfdSupportMatrixJson = \"\", kfdProductGateJsons = [], invariantPassportJsons = [], invariantPassportCommand = \"\", releaseEvidenceJsons = [], kfdAgentHubEvidenceJson = \"\", controllerReceiptReferences = [], githubArtifactAttestationPolicyJsons = [], basePassportJson = \"\", requireBaseKfd = false, releaseJsonExtra = \"\", publishJson = \"\", workflow = {}, checkedAt = \"\", } = {}) | { cwd = process.cwd(), tag = \"\", repository = process.env.GITHUB_REPOSITORY \\|\\| \"\", sourceSha = process.env.GITHUB_SHA \\|\\| \"\", line = \"\", outputDir = \".buildchain/release-passport\", assetsJson = \"\", assetsDir = \"\", releaseJson = \"\", productName = \"Buildchain\", packageName = \"@kungfu-tech/buildchain\", packageVersion = \"\", packageSetJson = \"\", publishEvidenceJson = \"\", trustedPublishingJson = \"\", transactionJson = \"\", anchorManifestJson = \"\", versionMaterialJson = \"\", impactJson = \"\", buildSummaryJson = \"\", buildFactsJsons = [], platformManifestJsons = [], distTagEvidenceJson = \"\", kfd1WitnessJsons = [], kfd2ClaimJsons = [], kfd3PrebuildWitnessJsons = [], kfd3ArtifactWitnessJsons = [], kfd3ArtifactVerifyCommand = \"\", kfdSupportMatrixJson = \"\", kfdProductGateJsons = [], invariantPassportJsons = [], invariantPassportCommand = \"\", releaseEvidenceJsons = [], kfdAgentHubEvidenceJson = \"\", controllerReceiptReferences = [], githubArtifactAttestationPolicyJsons = [], basePassportJson = \"\", requireBaseKfd = false, releaseJsonExtra = \"\", publishJson = \"\", workflow = {}, checkedAt = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { collectGitHubReleasePassport } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:1488` |\n| `collectGitSourceFacts` | function: function collectGitSourceFacts({ cwd = process.cwd(), root = \".\" } = {}) | { cwd = process.cwd(), root = \".\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectGitSourceFacts } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:146` |\n| `collectHomebrewTapFacts` | function: async function collectHomebrewTapFacts({ cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", } = {}) | { cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectHomebrewTapFacts } from \"@kungfu-tech/buildchain\";` | `packages/core/homebrew.js:223` |\n| `collectKfdStatus` | function: function collectKfdStatus({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectKfdStatus } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd.js:902` |\n| `collectModuleBuildFacts` | function: function collectModuleBuildFacts({ cwd = process.cwd(), moduleId = \"\", moduleRoot = \"\", scope = \"\", versionSource = undefined, versionSourceId = \"\", outputs = [], lifecycle = \"\", platform = currentPlatform(), dependencies = [], now = nowIso(), } = {}) | { cwd = process.cwd(), moduleId = \"\", moduleRoot = \"\", scope = \"\", versionSource = undefined, versionSourceId = \"\", outputs = [], lifecycle = \"\", platform = currentPlatform(), dependencies = [], now = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectModuleBuildFacts } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:302` |\n| `collectNativeDiagnostics` | function: function collectNativeDiagnostics({ cwd = process.cwd(), profile = undefined, runCommand = defaultDiagnosticCommandRunner, } = {}) | { cwd = process.cwd(), profile = undefined, runCommand = defaultDiagnosticCommandRunner, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectNativeDiagnostics } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:295` |\n| `collectPaperFleetAudit` | function: function collectPaperFleetAudit({ root = process.cwd(), repositories = [], buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainSha = \"\", governance = {}, } = {}) | { root = process.cwd(), repositories = [], buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainSha = \"\", governance = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectPaperFleetAudit } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-fleet.js:158` |\n| `collectPaperPreflight` | function: function collectPaperPreflight({ cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainRef = \"v3\", buildchainSha = \"\", registry = NPM_REGISTRY, offline = false, agentEntryMode = \"contract\", } = {}) | { cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainRef = \"v3\", buildchainSha = \"\", registry = NPM_REGISTRY, offline = false, agentEntryMode = \"contract\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectPaperPreflight } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:2413` |\n| `collectPaperStatus` | function: function collectPaperStatus({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectPaperStatus } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:1471` |\n| `collectProcessTreeSnapshot` | function: function collectProcessTreeSnapshot({ rootPid = process.pid, cwd = process.cwd(), platform = process.platform, runCommand = defaultDiagnosticCommandRunner, } = {}) | { rootPid = process.pid, cwd = process.cwd(), platform = process.platform, runCommand = defaultDiagnosticCommandRunner, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectProcessTreeSnapshot } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:1029` |\n| `collectPublicationArtifact` | function: function collectPublicationArtifact({ cwd = process.cwd(), sourceSha = \"\", sourceBundle = true, sourceBundlePath = \"\", generatedAt = \"\", manifestPath = \"\", passportPath = \"\", } = {}) | { cwd = process.cwd(), sourceSha = \"\", sourceBundle = true, sourceBundlePath = \"\", generatedAt = \"\", manifestPath = \"\", passportPath = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { collectPublicationArtifact } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-artifact.js:271` |\n| `collectPublicationPackageFacts` | function: function collectPublicationPackageFacts({ cwd = process.cwd(), packageName = \"\", outputDir = \".buildchain/publication/npm-package\", } = {}) | { cwd = process.cwd(), packageName = \"\", outputDir = \".buildchain/publication/npm-package\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { collectPublicationPackageFacts } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-package.js:74` |\n| `collectPublicSurfaceReverseAudit` | function: function collectPublicSurfaceReverseAudit({ root = process.cwd(), cliRegistry: suppliedCliRegistry = undefined, workflowRegistry: suppliedWorkflowRegistry = undefined, pageRegistry: suppliedPageRegistry = undefined, } = {}) | { root = process.cwd(), cliRegistry: suppliedCliRegistry = undefined, workflowRegistry: suppliedWorkflowRegistry = undefined, pageRegistry: suppliedPageRegistry = undefined, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectPublicSurfaceReverseAudit } from \"@kungfu-tech/buildchain\";` | `packages/core/public-surface-audit.js:161` |\n| `collectReadmeBadgeFacts` | function: async function collectReadmeBadgeFacts({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectReadmeBadgeFacts } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:700` |\n| `collectRunnerDiagnostics` | function: function collectRunnerDiagnostics() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectRunnerDiagnostics } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:468` |\n| `collectToolDiagnostics` | function: function collectToolDiagnostics({ cwd = process.cwd(), tools = [\"node\", \"pnpm\", \"npm\", \"git\", \"cmake\", \"ninja\", \"ccache\", \"sccache\"] } = {}) | { cwd = process.cwd(), tools = [\"node\", \"pnpm\", \"npm\", \"git\", \"cmake\", \"ninja\", \"ccache\", \"sccache\"] } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectToolDiagnostics } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:495` |\n| `collectVersionSourceFact` | function: function collectVersionSourceFact({ cwd = process.cwd(), source = undefined, sourceId = \"\", now = nowIso() } = {}) | { cwd = process.cwd(), source = undefined, sourceId = \"\", now = nowIso() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { collectVersionSourceFact } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:173` |\n| `commandForKungfuUpgrade` | function: function commandForKungfuUpgrade(manager, scope = \"@kungfu-trader\") | manager, scope = \"@kungfu-trader\" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { commandForKungfuUpgrade } from \"@kungfu-tech/buildchain\";` | `packages/core/package-manager.js:121` |\n| `commandForRunScript` | function: function commandForRunScript(manager, script) | manager, script | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { commandForRunScript } from \"@kungfu-tech/buildchain\";` | `packages/core/package-manager.js:89` |\n| `commandForVersion` | function: function commandForVersion(manager, keyword, options = {}) | manager, keyword, options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { commandForVersion } from \"@kungfu-tech/buildchain\";` | `packages/core/package-manager.js:100` |\n| `compileEffectiveGithubGovernancePolicy` | function: function compileEffectiveGithubGovernancePolicy({ branch, defaultBranch, protectedBranch = false, protection, rulesets = [], } = {}) | { branch, defaultBranch, protectedBranch = false, protection, rulesets = [], } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { compileEffectiveGithubGovernancePolicy } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:311` |\n| `completeReleasePropagationWork` | function: function completeReleasePropagationWork({ work, expectedWorkRoot, receipt, completionDecision, } = {}) | { work, expectedWorkRoot, receipt, completionDecision, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { completeReleasePropagationWork } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-work-transitions.js:110` |\n| `computeConsumerIssueFingerprint` | function: function computeConsumerIssueFingerprint(fields = {}) | fields = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { computeConsumerIssueFingerprint } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:64` |\n| `CONSUMER_PUBLICATION_DECISION_CONTRACT` | constant: const CONSUMER_PUBLICATION_DECISION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { CONSUMER_PUBLICATION_DECISION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:20` |\n| `consumerIssueMarker` | function: function consumerIssueMarker(fingerprint) | fingerprint | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { consumerIssueMarker } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:76` |\n| `contractSummary` | function: function contractSummary(contractWorld, runtimeRef = \"\", runtimeSha = \"\") | contractWorld, runtimeRef = \"\", runtimeSha = \"\" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { contractSummary } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-contract.js:945` |\n| `controllerEvidenceDigest` | function: function controllerEvidenceDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { controllerEvidenceDigest } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:150` |\n| `createAnchoredVersionMaterialEvidence` | function: function createAnchoredVersionMaterialEvidence({ cwd = process.cwd(), targetChannel = \"\", targetRef = \"\", alphaRef = \"\", releaseRef = \"HEAD\", runLifecycle = true, } = {}) | { cwd = process.cwd(), targetChannel = \"\", targetRef = \"\", alphaRef = \"\", releaseRef = \"HEAD\", runLifecycle = true, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createAnchoredVersionMaterialEvidence } from \"@kungfu-tech/buildchain\";` | `packages/core/anchored-version-material.js:118` |\n| `createArtifactEvidence` | function: function createArtifactEvidence({ assets = [], repository = \"\", tag = \"\", sourceSha = \"\", workflow = {} } = {}) | { assets = [], repository = \"\", tag = \"\", sourceSha = \"\", workflow = {} } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createArtifactEvidence } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:1158` |\n| `createArtifactSigningReceipt` | function: function createArtifactSigningReceipt({ request, status = \"passed\", authority = {}, result = {}, signatures = [], reason = \"\", } = {}) | { request, status = \"passed\", authority = {}, result = {}, signatures = [], reason = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createArtifactSigningReceipt } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing.js:313` |\n| `createArtifactSigningRequest` | function: function createArtifactSigningRequest({ source = {}, runtime = {}, artifact = {}, signature = {}, delivery = {}, } = {}) | { source = {}, runtime = {}, artifact = {}, signature = {}, delivery = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createArtifactSigningRequest } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing.js:167` |\n| `createArtifactSigningResult` | function: function createArtifactSigningResult({ request, receipt, receiptPath = \"receipt.json\", payload = {}, evidence = [], verification = {}, } = {}) | { request, receipt, receiptPath = \"receipt.json\", payload = {}, evidence = [], verification = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createArtifactSigningResult } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing-result.js:68` |\n| `createBuildchainContractLock` | function: function createBuildchainContractLock({ buildchainRef = \"v3\", resolvedSha = \"\", contractWorld, compatibilityPolicy = DEFAULT_POLICY, acceptedAt = new Date().toISOString(), } = {}) | { buildchainRef = \"v3\", resolvedSha = \"\", contractWorld, compatibilityPolicy = DEFAULT_POLICY, acceptedAt = new Date().toISOString(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createBuildchainContractLock } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-contract.js:787` |\n| `createBuildchainContractWorld` | function: function createBuildchainContractWorld({ root = process.cwd(), packageJson = undefined, controllerRegistry = undefined, } = {}) | { root = process.cwd(), packageJson = undefined, controllerRegistry = undefined, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainContractWorld } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-contract.js:110` |\n| `createBuildchainGithubGovernanceAuthority` | function: function createBuildchainGithubGovernanceAuthority() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainGithubGovernanceAuthority } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:450` |\n| `createBuildchainKfd1Witness` | function: function createBuildchainKfd1Witness({ root = process.cwd(), sourceSha = \"\" } = {}) | { root = process.cwd(), sourceSha = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfd1Witness } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-kfd-claims.js:530` |\n| `createBuildchainKfd2Claims` | function: function createBuildchainKfd2Claims({ root = process.cwd(), witnessFiles = {} } = {}) | { root = process.cwd(), witnessFiles = {} } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfd2Claims } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-kfd-claims.js:687` |\n| `createBuildchainKfd3ArtifactWitness` | function: function createBuildchainKfd3ArtifactWitness({ root = process.cwd(), sourceSha = \"\" } = {}) | { root = process.cwd(), sourceSha = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfd3ArtifactWitness } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-kfd-claims.js:647` |\n| `createBuildchainKfd3PrebuildWitness` | function: function createBuildchainKfd3PrebuildWitness({ root = process.cwd(), sourceSha = \"\" } = {}) | { root = process.cwd(), sourceSha = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfd3PrebuildWitness } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-kfd-claims.js:583` |\n| `createBuildchainKfdClaimRegistry` | function: function createBuildchainKfdClaimRegistry({ root = process.cwd(), sourceSha = \"\" } = {}) | { root = process.cwd(), sourceSha = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfdClaimRegistry } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-kfd-claims.js:510` |\n| `createBuildchainKfdSurfaceRegistry` | function: function createBuildchainKfdSurfaceRegistry({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfdSurfaceRegistry } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-kfd-claims.js:411` |\n| `createBuildchainLayoutDiscovery` | function: function createBuildchainLayoutDiscovery({ cwd = process.cwd(), buildchainVersion = \"\", } = {}) | { cwd = process.cwd(), buildchainVersion = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainLayoutDiscovery } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:99` |\n| `createBuildchainLogger` | function: function createBuildchainLogger(options = {}) | options = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { createBuildchainLogger } from \"@kungfu-tech/buildchain\";` | `packages/core/logging.js:300` |\n| `createBuildchainPublicationAuthorityRegistry` | function: function createBuildchainPublicationAuthorityRegistry({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainPublicationAuthorityRegistry } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-publication-authority.js:79` |\n| `createBuildchainPublicClaimDefinitions` | function: function createBuildchainPublicClaimDefinitions() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainPublicClaimDefinitions } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-kfd-claims.js:226` |\n| `createCacheEvidenceSet` | function: function createCacheEvidenceSet({ repository, sourceCommit, sourceTree = \"\", runtimeCommit = \"\", platform, operations = [], } = {}) | { repository, sourceCommit, sourceTree = \"\", runtimeCommit = \"\", platform, operations = [], } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createCacheEvidenceSet } from \"@kungfu-tech/buildchain\";` | `packages/core/cache-evidence.js:244` |\n| `createCacheOperationReceipt` | function: function createCacheOperationReceipt({ operationId, operation, provider, producer, platform, cacheKey, cacheRoot, outcome, bindings = {}, metrics, evidence, } = {}) | { operationId, operation, provider, producer, platform, cacheKey, cacheRoot, outcome, bindings = {}, metrics, evidence, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createCacheOperationReceipt } from \"@kungfu-tech/buildchain\";` | `packages/core/cache-evidence.js:169` |\n| `createCandidateTimeline` | function: function createCandidateTimeline({ candidate = {}, events = [], generatedAt, } = {}) | { candidate = {}, events = [], generatedAt, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createCandidateTimeline } from \"@kungfu-tech/buildchain\";` | `packages/core/candidate-timeline.js:381` |\n| `createConsumerPublicationDecision` | function: function createConsumerPublicationDecision({ capability, gateAggregate, decision, predicateId, predicateDigest, evidence = {}, now = new Date(), } = {}) | { capability, gateAggregate, decision, predicateId, predicateDigest, evidence = {}, now = new Date(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createConsumerPublicationDecision } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:991` |\n| `createControllerPlan` | function: function createControllerPlan({ descriptor, source = {}, runtime = {}, inputs = {} } = {}) | { descriptor, source = {}, runtime = {}, inputs = {} } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createControllerPlan } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:286` |\n| `createControllerReceipt` | function: function createControllerReceipt({ plan, stages = [], evidence = [], reason = undefined, artifact = \"\" } = {}) | { plan, stages = [], evidence = [], reason = undefined, artifact = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createControllerReceipt } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:362` |\n| `createControllerReceiptReference` | function: function createControllerReceiptReference(receipt) | receipt | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createControllerReceiptReference } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:490` |\n| `createControllerRegistry` | function: function createControllerRegistry({ workflows = [] } = {}) | { workflows = [] } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createControllerRegistry } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:196` |\n| `createDiagnosticsArtifact` | function: function createDiagnosticsArtifact({ cwd = process.cwd(), logPath = \"\", artifactPaths = [], cacheDirs = [], lifecycleObservability = undefined, processSamples = [], processSummary = undefined, requestedParallelism = 0, sourceCheckout = undefined, compilerCachePreparation = undefined, links = {}, } = {}) | { cwd = process.cwd(), logPath = \"\", artifactPaths = [], cacheDirs = [], lifecycleObservability = undefined, processSamples = [], processSummary = undefined, requestedParallelism = 0, sourceCheckout = undefined, compilerCachePreparation = undefined, links = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createDiagnosticsArtifact } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:1408` |\n| `createGitHubArtifactAttestationEvidence` | function: function createGitHubArtifactAttestationEvidence({ preparation, attestationId, attestationUrl, bundlePath, workflow = {}, } = {}) | { preparation, attestationId, attestationUrl, bundlePath, workflow = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createGitHubArtifactAttestationEvidence } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:474` |\n| `createGitHubArtifactAttestationPolicy` | function: function createGitHubArtifactAttestationPolicy(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGitHubArtifactAttestationPolicy } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:204` |\n| `createGitHubArtifactAttestationVerificationPlan` | function: function createGitHubArtifactAttestationVerificationPlan({ artifactPath, bundlePath, evidence, } = {}) | { artifactPath, bundlePath, evidence, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGitHubArtifactAttestationVerificationPlan } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:524` |\n| `createGithubGovernanceRolloutPlan` | function: function createGithubGovernanceRolloutPlan({ repository, targetRef, inventory, rollbackSnapshot, rollbackProtectionExists = true, desiredProtection, } = {}) | { repository, targetRef, inventory, rollbackSnapshot, rollbackProtectionExists = true, desiredProtection, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGithubGovernanceRolloutPlan } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:932` |\n| `createGitHubIssueRequest` | function: function createGitHubIssueRequest({ token, apiUrl = process.env.GITHUB_API_URL \\|\\| \"https://api.github.com\", fetchImpl = globalThis.fetch, retryDelaysMs = DEFAULT_RETRY_DELAYS_MS, } = {}) | { token, apiUrl = process.env.GITHUB_API_URL \\|\\| \"https://api.github.com\", fetchImpl = globalThis.fetch, retryDelaysMs = DEFAULT_RETRY_DELAYS_MS, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGitHubIssueRequest } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:393` |\n| `createGithubRulesetBypassRolloutPlan` | function: function createGithubRulesetBypassRolloutPlan({ repository, rulesetId, inventory, rollbackSnapshot, } = {}) | { repository, rulesetId, inventory, rollbackSnapshot, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGithubRulesetBypassRolloutPlan } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:1110` |\n| `createGithubRulesetGovernanceRolloutPlan` | function: function createGithubRulesetGovernanceRolloutPlan({ repository, targetRef, rulesetId, rulesetName, inventory, rollbackSnapshot, desiredProtection, } = {}) | { repository, targetRef, rulesetId, rulesetName, inventory, rollbackSnapshot, desiredProtection, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGithubRulesetGovernanceRolloutPlan } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:1189` |\n| `createKfd1ReleaseGateEvidence` | function: function createKfd1ReleaseGateEvidence({ cwd = process.cwd(), artifactRoot = \"\", artifacts = [], witnesses = [], verifiedAt = new Date().toISOString(), metadata = resolveKfd1Metadata(), } = {}) | { cwd = process.cwd(), artifactRoot = \"\", artifacts = [], witnesses = [], verifiedAt = new Date().toISOString(), metadata = resolveKfd1Metadata(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfd1ReleaseGateEvidence } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:977` |\n| `createKfd3CollaborationInterfaceReleaseGateEvidence` | function: function createKfd3CollaborationInterfaceReleaseGateEvidence({ prebuildWitnesses = [], artifactWitnesses = [], prebuildWitnessMetas = [], artifactWitnessMetas = [], artifactCommandMeta = undefined, verifiedAt = new Date().toISOString(), metadata = resolveKfd3Metadata(), } = {}) | { prebuildWitnesses = [], artifactWitnesses = [], prebuildWitnessMetas = [], artifactWitnessMetas = [], artifactCommandMeta = undefined, verifiedAt = new Date().toISOString(), metadata = resolveKfd3Metadata(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfd3CollaborationInterfaceReleaseGateEvidence } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:1132` |\n| `createKfd3SurfaceWitness` | function: function createKfd3SurfaceWitness({ cwd = process.cwd(), registryPath = \"\", kind = \"prebuild\", sourceSha = \"\", artifactPath = \"\", } = {}) | { cwd = process.cwd(), registryPath = \"\", kind = \"prebuild\", sourceSha = \"\", artifactPath = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | network | `import { createKfd3SurfaceWitness } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd3-surface-register.js:702` |\n| `createKfdBadgeSpecsFromStandards` | function: function createKfdBadgeSpecsFromStandards(standardsMetadata) | standardsMetadata | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfdBadgeSpecsFromStandards } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:126` |\n| `createKfdSupportProjection` | function: function createKfdSupportProjection({ matrix, matrixRoot = \"\", gateResults = [], authorityPath = \".buildchain/kfd/support-matrix.json\", expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {}) | { matrix, matrixRoot = \"\", gateResults = [], authorityPath = \".buildchain/kfd/support-matrix.json\", expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfdSupportProjection } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:716` |\n| `createKungfuBuildInfoProjection` | function: function createKungfuBuildInfoProjection({ moduleFact, cwd = process.cwd(), now = nowIso() } = {}) | { moduleFact, cwd = process.cwd(), now = nowIso() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKungfuBuildInfoProjection } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:520` |\n| `createManualUpstreamPickupCapture` | function: function createManualUpstreamPickupCapture({ plan, expectedDownstreamBaseSha, }) | { plan, expectedDownstreamBaseSha, } | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createManualUpstreamPickupCapture } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-pickup.js:361` |\n| `createManualUpstreamPickupPlan` | function: function createManualUpstreamPickupPlan({ config: configInput, sourceId, channel, currentVersion, upstreamRelease, }) | { config: configInput, sourceId, channel, currentVersion, upstreamRelease, } | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createManualUpstreamPickupPlan } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-pickup.js:303` |\n| `createPackageReleasePropagationCapture` | function: function createPackageReleasePropagationCapture({ config: configInput, upstreamRelease: upstreamReleaseInput, expectedBaseShas = {}, } = {}) | { config: configInput, upstreamRelease: upstreamReleaseInput, expectedBaseShas = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPackageReleasePropagationCapture } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-capture.js:101` |\n| `createPaperAlphaPlan` | function: function createPaperAlphaPlan({ cwd = process.cwd(), sourceRef = \"\", targetRef = \"\", } = {}) | { cwd = process.cwd(), sourceRef = \"\", targetRef = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPaperAlphaPlan } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:2655` |\n| `createPaperBuildPlan` | function: function createPaperBuildPlan({ cwd = process.cwd(), sourceSha = \"\", pullToolchain = true, } = {}) | { cwd = process.cwd(), sourceSha = \"\", pullToolchain = true, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPaperBuildPlan } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:2592` |\n| `createPaperResumePlan` | function: function createPaperResumePlan({ cwd = process.cwd(), buildchainRef = \"\", } = {}) | { cwd = process.cwd(), buildchainRef = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { createPaperResumePlan } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:2713` |\n| `createPaperWorkStartPlan` | function: function createPaperWorkStartPlan({ cwd = process.cwd(), topic = \"\", branch = \"\", buildchainSha = \"\", } = {}) | { cwd = process.cwd(), topic = \"\", branch = \"\", buildchainSha = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPaperWorkStartPlan } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-work.js:41` |\n| `createPaperWorkSubmitPlan` | function: function createPaperWorkSubmitPlan({ cwd = process.cwd(), pullRequests = [], pullRequestObservation = { ok: true }, buildchainSha = \"\", } = {}) | { cwd = process.cwd(), pullRequests = [], pullRequestObservation = { ok: true }, buildchainSha = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPaperWorkSubmitPlan } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-work.js:207` |\n| `createPortableDevCachePlan` | function: function createPortableDevCachePlan(manifest) | manifest | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPortableDevCachePlan } from \"@kungfu-tech/buildchain\";` | `packages/core/portable-dev-cache.js:172` |\n| `createPortableDevCacheReceipt` | function: function createPortableDevCacheReceipt({ plan, matchedKey = \"\", cacheHit = \"\", validationStatus = \"pass\", validationReason = \"\", coldFallbackStatus = \"not-run\", }) | { plan, matchedKey = \"\", cacheHit = \"\", validationStatus = \"pass\", validationReason = \"\", coldFallbackStatus = \"not-run\", } | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPortableDevCacheReceipt } from \"@kungfu-tech/buildchain\";` | `packages/core/portable-dev-cache.js:226` |\n| `createPublicationAdmission` | function: function createPublicationAdmission(input = {}) | input = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPublicationAdmission } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:236` |\n| `createPublicationArtifactCandidate` | function: function createPublicationArtifactCandidate({ repository, sourceSha, sourceTreeSha, runtimeSha, manifest, passport, controllerReceipt, files = [], } = {}) | { repository, sourceSha, sourceTreeSha, runtimeSha, manifest, passport, controllerReceipt, files = [], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationArtifactCandidate } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-artifact-candidate.js:55` |\n| `createPublicationArtifactManifestSet` | function: function createPublicationArtifactManifestSet({ repository, sourceSha, sourceTreeSha, manifests = [], payloads = [], } = {}) | { repository, sourceSha, sourceTreeSha, manifests = [], payloads = [], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationArtifactManifestSet } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:303` |\n| `createPublicationAuthorityRegistry` | function: function createPublicationAuthorityRegistry({ descriptors = [], workflows = [] } = {}) | { descriptors = [], workflows = [] } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationAuthorityRegistry } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:121` |\n| `createPublicationControlPlaneAudit` | function: function createPublicationControlPlaneAudit({ repository, workflowPath, publisherWorkflowPath, environment, facts = [], observedAt, expiresAt, } = {}) | { repository, workflowPath, publisherWorkflowPath, environment, facts = [], observedAt, expiresAt, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPublicationControlPlaneAudit } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:208` |\n| `createPublicationGateDecision` | function: function createPublicationGateDecision({ sourceSha, profile, required = false, rationale, policy = {}, } = {}) | { sourceSha, profile, required = false, rationale, policy = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPublicationGateDecision } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:280` |\n| `createPublicationQualificationReceipt` | function: function createPublicationQualificationReceipt({ capability, gateAggregate, consumerDecision, now = new Date(), } = {}) | { capability, gateAggregate, consumerDecision, now = new Date(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationQualificationReceipt } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:1035` |\n| `createPublicationSealedBundle` | function: function createPublicationSealedBundle({ candidate, packageName, packageVersion, npmTarballPath, npmIntegrity, releaseAssetPaths = [], githubReleaseRequired = true, } = {}) | { candidate, packageName, packageVersion, npmTarballPath, npmIntegrity, releaseAssetPaths = [], githubReleaseRequired = true, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationSealedBundle } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-sealed-bundle.js:75` |\n| `createPublicationSourceBundle` | function: function createPublicationSourceBundle({ cwd = process.cwd(), sourcePaths = [], output = \".buildchain/publication/source.tar.gz\", } = {}) | { cwd = process.cwd(), sourcePaths = [], output = \".buildchain/publication/source.tar.gz\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write, subprocess | `import { createPublicationSourceBundle } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-artifact.js:249` |\n| `createReadmeBadgeEndpointRegistry` | function: function createReadmeBadgeEndpointRegistry({ kfdSpecs = undefined, kfdStandards = undefined } = {}) | { kfdSpecs = undefined, kfdStandards = undefined } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { createReadmeBadgeEndpointRegistry } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:133` |\n| `createReleaseActivationReceiptSet` | function: function createReleaseActivationReceiptSet({ transaction, receipts = [], } = {}) | { transaction, receipts = [], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleaseActivationReceiptSet } from \"@kungfu-tech/buildchain\";` | `packages/core/release-activation-transaction.js:311` |\n| `createReleaseActivationTransaction` | function: function createReleaseActivationTransaction({ transactionId, mode = \"shadow\", bindings, owners, } = {}) | { transactionId, mode = \"shadow\", bindings, owners, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleaseActivationTransaction } from \"@kungfu-tech/buildchain\";` | `packages/core/release-activation-transaction.js:103` |\n| `createReleaseCandidatePassport` | function: function createReleaseCandidatePassport({ repository = \"\", pullRequest = {}, targetChannel = \"\", version = \"\", sourceHeadSha = \"\", baseSha = \"\", mergeRefSha = \"\", sourceTreeHash = \"\", buildSummary = {}, buildchain = {}, gateAggregate = undefined, familyEvidence = undefined, controllerReceipts = [], controllerReceiptReferences = [], workflow = {}, createdAt = nowIso(), } = {}) | { repository = \"\", pullRequest = {}, targetChannel = \"\", version = \"\", sourceHeadSha = \"\", baseSha = \"\", mergeRefSha = \"\", sourceTreeHash = \"\", buildSummary = {}, buildchain = {}, gateAggregate = undefined, familyEvidence = undefined, controllerReceipts = [], controllerReceiptReferences = [], workflow = {}, createdAt = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleaseCandidatePassport } from \"@kungfu-tech/buildchain\";` | `packages/core/release-candidate.js:310` |\n| `createReleaseCheckReport` | function: function createReleaseCheckReport({ passport, artifactEvidence, publishEvidence, impact, agentIndex, productMechanism, kfdAgentHubEvidence, kfdSupportEvidence, releaseEvidenceDocuments = [], checkedAt = nowIso(), } = {}) | { passport, artifactEvidence, publishEvidence, impact, agentIndex, productMechanism, kfdAgentHubEvidence, kfdSupportEvidence, releaseEvidenceDocuments = [], checkedAt = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleaseCheckReport } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:2628` |\n| `createReleasePassport` | function: function createReleasePassport({ cwd = process.cwd(), repository = \"\", tag = \"\", sourceSha = \"\", line = \"\", productName = \"Buildchain\", packageName = \"@kungfu-tech/buildchain\", packageVersion = \"\", productMechanismPath = \"product-mechanism.json\", artifactEvidencePath = \"artifact-evidence.json\", impactPath = \"impact.json\", agentIndexPath = \"agent-index.json\", checkReportPath = \"check-report.json\", publishEvidencePath = \"\", transactionStatePath = \"\", assets = [], packageSet = undefined, anchorManifest = undefined, versionMaterial = undefined, publishEvidence = undefined, trustedPublishing = undefined, transaction = undefined, buildSummary = undefined, buildFacts = [], platformArtifactManifests = [], distTagPromotionEvidence = undefined, release = {}, publish = {}, impact = undefined, workflow = {}, kfd1 = undefined, kfd2Claims = [], kfd3 = undefined, kfdSupport = undefined, kfdSupportEvidencePath = \"\", invariantPassports = undefined, releaseEvidence = [], kfdAgentHubEvidence = undefined, kfdAgentHubEvidencePath = \"\", controllerReceipts = [], controllerReceiptReferences = [], githubArtifactAttestations = [], checkedAt = \"\", } = {}) | { cwd = process.cwd(), repository = \"\", tag = \"\", sourceSha = \"\", line = \"\", productName = \"Buildchain\", packageName = \"@kungfu-tech/buildchain\", packageVersion = \"\", productMechanismPath = \"product-mechanism.json\", artifactEvidencePath = \"artifact-evidence.json\", impactPath = \"impact.json\", agentIndexPath = \"agent-index.json\", checkReportPath = \"check-report.json\", publishEvidencePath = \"\", transactionStatePath = \"\", assets = [], packageSet = undefined, anchorManifest = undefined, versionMaterial = undefined, publishEvidence = undefined, trustedPublishing = undefined, transaction = undefined, buildSummary = undefined, buildFacts = [], platformArtifactManifests = [], distTagPromotionEvidence = undefined, release = {}, publish = {}, impact = undefined, workflow = {}, kfd1 = undefined, kfd2Claims = [], kfd3 = undefined, kfdSupport = undefined, kfdSupportEvidencePath = \"\", invariantPassports = undefined, releaseEvidence = [], kfdAgentHubEvidence = undefined, kfdAgentHubEvidencePath = \"\", controllerReceipts = [], controllerReceiptReferences = [], githubArtifactAttestations = [], checkedAt = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleasePassport } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:1214` |\n| `createReleasePassportCheckManifest` | function: function createReleasePassportCheckManifest({ standards = kfdStandards } = {}) | { standards = kfdStandards } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleasePassportCheckManifest } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport-contract.js:147` |\n| `createReleasePropagationLock` | function: function createReleasePropagationLock({ graph, edge, sourceNode, targetNode, upstreamRelease, downstreamChannel, } = {}) | { graph, edge, sourceNode, targetNode, upstreamRelease, downstreamChannel, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleasePropagationLock } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation.js:199` |\n| `createReleasePropagationPushPlan` | function: function createReleasePropagationPushPlan({ work: workInput, expectedWorkRoot, repositoryState: stateInput, } = {}) | { work: workInput, expectedWorkRoot, repositoryState: stateInput, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { createReleasePropagationPushPlan } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-push.js:77` |\n| `createReleasePropagationReceipt` | function: function createReleasePropagationReceipt({ plan, target = \"\", lockResult, prOutcome, stagingState = \"pending\", productionState = \"not-requested\", observedAt = \"\", } = {}) | { plan, target = \"\", lockResult, prOutcome, stagingState = \"pending\", productionState = \"not-requested\", observedAt = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleasePropagationReceipt } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation.js:371` |\n| `createReleasePropagationStageReceipt` | function: function createReleasePropagationStageReceipt({ work, stage, outcome = \"success\", observedAt, actor, summary, evidence, failure = null, } = {}) | { work, stage, outcome = \"success\", observedAt, actor, summary, evidence, failure = null, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleasePropagationStageReceipt } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-work.js:214` |\n| `createReleasePropagationWork` | function: function createReleasePropagationWork({ plan, target = \"\", workContext, expectedDownstreamBaseSha, } = {}) | { plan, target = \"\", workContext, expectedDownstreamBaseSha, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleasePropagationWork } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-work.js:111` |\n| `createReleaseTransaction` | function: function createReleaseTransaction({ repository, version, exactTag = \"\", channel, line = \"\", sourceSha, targetRef, releaseSha, releaseMaterialSha = releaseSha, publishToolingSha = \"\", lifecycleIdentity = \"lifecycle.publish\", statePath = \"\", evidencePath = \"\", actor = \"\", runId = \"\", } = {}) | { repository, version, exactTag = \"\", channel, line = \"\", sourceSha, targetRef, releaseSha, releaseMaterialSha = releaseSha, publishToolingSha = \"\", lifecycleIdentity = \"lifecycle.publish\", statePath = \"\", evidencePath = \"\", actor = \"\", runId = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleaseTransaction } from \"@kungfu-tech/buildchain\";` | `packages/core/publish-transaction.js:197` |\n| `createRunnerProvenance` | function: function createRunnerProvenance({ runnerClass, os, architecture, imageDigest, measurementDigest, baselineDigest = \"\", toolchainDigest = \"\", cacheContractDigest = \"\", taskIsolationDigest = \"\", cleanBaselineProven = false, isolation = \"\", } = {}) | { runnerClass, os, architecture, imageDigest, measurementDigest, baselineDigest = \"\", toolchainDigest = \"\", cacheContractDigest = \"\", taskIsolationDigest = \"\", cleanBaselineProven = false, isolation = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createRunnerProvenance } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:166` |\n| `createStableCandidateLedger` | function: function createStableCandidateLedger({ repository, targetBranch, now = new Date().toISOString() } = {}) | { repository, targetBranch, now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createStableCandidateLedger } from \"@kungfu-tech/buildchain\";` | `packages/core/stable-candidate-ledger.js:56` |\n| `createSurfaceTimestampPolicy` | function: function createSurfaceTimestampPolicy({ generatedAt = \"\", publishedAt = \"\", sourceDateEpoch = process.env.SOURCE_DATE_EPOCH \\|\\| DEFAULT_SOURCE_DATE_EPOCH, sourceRevision = \"\", deterministicInputs = [], timestampPolicy = \"\", timestampFields = [\"generatedAt\", \"publishedAt\"], timestampFieldsParticipateInArtifactDigest = true, artifactDigestScope = \"manifest-and-artifact\", reproducible = true, } = {}) | { generatedAt = \"\", publishedAt = \"\", sourceDateEpoch = process.env.SOURCE_DATE_EPOCH \\|\\| DEFAULT_SOURCE_DATE_EPOCH, sourceRevision = \"\", deterministicInputs = [], timestampPolicy = \"\", timestampFields = [\"generatedAt\", \"publishedAt\"], timestampFieldsParticipateInArtifactDigest = true, artifactDigestScope = \"manifest-and-artifact\", reproducible = true, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createSurfaceTimestampPolicy } from \"@kungfu-tech/buildchain\";` | `packages/core/surface-manifest.js:34` |\n| `createWebSurfaceProductionDecision` | function: function createWebSurfaceProductionDecision({ approved, kind, repository, sourceSha, actor, actorPermission = \"\", releasePr = 0, releaseSource = \"\", reason, } = {}) | { approved, kind, repository, sourceSha, actor, actorPermission = \"\", releasePr = 0, releaseSource = \"\", reason, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createWebSurfaceProductionDecision } from \"@kungfu-tech/buildchain\";` | `packages/core/web-surface-publication-candidate.js:45` |\n| `createWebSurfacePublicationCandidate` | function: function createWebSurfacePublicationCandidate({ repository, sourceSha, sourceTreeSha, runtimeSha, plan, planFileDigest, controllerReceipt, decision, } = {}) | { repository, sourceSha, sourceTreeSha, runtimeSha, plan, planFileDigest, controllerReceipt, decision, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createWebSurfacePublicationCandidate } from \"@kungfu-tech/buildchain\";` | `packages/core/web-surface-publication-candidate.js:79` |\n| `decideChannelCandidate` | function: function decideChannelCandidate(input) | input | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { decideChannelCandidate } from \"@kungfu-tech/buildchain\";` | `packages/core/channel-candidate.js:90` |\n| `DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY` | constant: const DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY | none | value | Import does not declare a throw contract. | none-on-import | `import { DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:6` |\n| `defaultBuildchainLogPath` | function: function defaultBuildchainLogPath({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { defaultBuildchainLogPath } from \"@kungfu-tech/buildchain\";` | `packages/core/logging.js:41` |\n| `defaultPublishEvidencePath` | function: function defaultPublishEvidencePath(version, workspace = process.cwd()) | version, workspace = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { defaultPublishEvidencePath } from \"@kungfu-tech/buildchain\";` | `packages/core/publish-transaction.js:193` |\n| `defaultReleaseStatePath` | function: function defaultReleaseStatePath(version, workspace = process.cwd()) | version, workspace = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { defaultReleaseStatePath } from \"@kungfu-tech/buildchain\";` | `packages/core/publish-transaction.js:185` |\n| `DETACHED_ARTIFACT_SIGNATURE_CONTRACT` | constant: const DETACHED_ARTIFACT_SIGNATURE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { DETACHED_ARTIFACT_SIGNATURE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/detached-artifact-signature.js:10` |\n| `detectKfd3Surfaces` | function: function detectKfd3Surfaces({ cwd = process.cwd(), kinds = [], artifactPath = \"\" } = {}) | { cwd = process.cwd(), kinds = [], artifactPath = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { detectKfd3Surfaces } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd3-surface-register.js:423` |\n| `detectLockfile` | function: function detectLockfile(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { detectLockfile } from \"@kungfu-tech/buildchain\";` | `packages/core/package-manager.js:237` |\n| `detectPackageManager` | function: function detectPackageManager(cwd = process.cwd()) | cwd = process.cwd() | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { detectPackageManager } from \"@kungfu-tech/buildchain\";` | `packages/core/package-manager.js:56` |\n| `detectPublicationAuthoritySignals` | function: function detectPublicationAuthoritySignals(workflowText = \"\") | workflowText = \"\" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { detectPublicationAuthoritySignals } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:104` |\n| `detectRequestedParallelism` | function: function detectRequestedParallelism({ command = \"\", args = [], env = process.env, } = {}) | { command = \"\", args = [], env = process.env, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { detectRequestedParallelism } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:1188` |\n| `detectRequestedParallelismFromProcessSamples` | function: function detectRequestedParallelismFromProcessSamples(samples = []) | samples = [] | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { detectRequestedParallelismFromProcessSamples } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:1223` |\n| `discoverArtifactPassport` | function: async function discoverArtifactPassport({ subject, cwd = process.cwd(), passportLocation = \"\", locatorConfig = \"\", repository = \"\", tag = \"\", githubReleaseBaseUrl = \"\", } = {}) | { subject, cwd = process.cwd(), passportLocation = \"\", locatorConfig = \"\", repository = \"\", tag = \"\", githubReleaseBaseUrl = \"\", } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { discoverArtifactPassport } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-passport.js:499` |\n| `discoverBuildchainRepoFiles` | function: function discoverBuildchainRepoFiles(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { discoverBuildchainRepoFiles } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:143` |\n| `discoverConfiguredDerivedVersionMaterial` | function: function discoverConfiguredDerivedVersionMaterial(cwd = process.cwd(), loadedConfig = loadBuildchainConfig(cwd)) | cwd = process.cwd(), loadedConfig = loadBuildchainConfig(cwd) | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { discoverConfiguredDerivedVersionMaterial } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:1467` |\n| `discoverConfiguredVersionStateFiles` | function: function discoverConfiguredVersionStateFiles(cwd = process.cwd(), loadedConfig = loadBuildchainConfig(cwd)) | cwd = process.cwd(), loadedConfig = loadBuildchainConfig(cwd) | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { discoverConfiguredVersionStateFiles } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:1428` |\n| `discoverKfdStandards` | function: function discoverKfdStandards() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { discoverKfdStandards } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd.js:464` |\n| `discoverPaperFleet` | function: function discoverPaperFleet(root = process.cwd()) | root = process.cwd() | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { discoverPaperFleet } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-fleet.js:23` |\n| `enumerateActionInputs` | function: function enumerateActionInputs({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateActionInputs } from \"@kungfu-tech/buildchain\";` | `packages/core/public-surface-audit.js:91` |\n| `enumerateCliCommandsFromBin` | function: function enumerateCliCommandsFromBin({ root = process.cwd(), binPath = \"bin/buildchain.mjs\", } = {}) | { root = process.cwd(), binPath = \"bin/buildchain.mjs\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateCliCommandsFromBin } from \"@kungfu-tech/buildchain\";` | `packages/core/public-surface-cli.js:93` |\n| `enumerateDocCommandRefs` | function: function enumerateDocCommandRefs({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateDocCommandRefs } from \"@kungfu-tech/buildchain\";` | `packages/core/public-surface-audit.js:115` |\n| `enumerateSitePages` | function: function enumerateSitePages({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateSitePages } from \"@kungfu-tech/buildchain\";` | `packages/core/public-surface-audit.js:106` |\n| `enumerateWorkflowInputs` | function: function enumerateWorkflowInputs({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateWorkflowInputs } from \"@kungfu-tech/buildchain\";` | `packages/core/public-surface-audit.js:74` |\n| `evaluateBuildchainContractLock` | function: function evaluateBuildchainContractLock({ lock, current, runtimeRef = \"\", runtimeSha = \"\", runtimeClass = \"\", compatibilityPolicy = \"\", } = {}) | { lock, current, runtimeRef = \"\", runtimeSha = \"\", runtimeClass = \"\", compatibilityPolicy = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { evaluateBuildchainContractLock } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-contract.js:853` |\n| `evaluateCodeownersAuthority` | function: function evaluateCodeownersAuthority({ source = \"\", sourcePath = \"\", reviewAuthority = \"kungfu-origin\", protectedPaths = PROTECTED_AUTHORITY_PATHS, } = {}) | { source = \"\", sourcePath = \"\", reviewAuthority = \"kungfu-origin\", protectedPaths = PROTECTED_AUTHORITY_PATHS, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluateCodeownersAuthority } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:425` |\n| `evaluateGithubGovernanceSnapshot` | function: function evaluateGithubGovernanceSnapshot({ descriptor = createBuildchainGithubGovernanceAuthority(), repository, targetRef, organizationPlan, codeowners, effectivePolicy, memberships, apiEvidence = {}, observedAt, expiresAt, verifier = {}, } = {}) | { descriptor = createBuildchainGithubGovernanceAuthority(), repository, targetRef, organizationPlan, codeowners, effectivePolicy, memberships, apiEvidence = {}, observedAt, expiresAt, verifier = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { evaluateGithubGovernanceSnapshot } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:694` |\n| `evaluateKfdProductGate` | function: async function evaluateKfdProductGate({ cwd = process.cwd(), input, expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {}) | { cwd = process.cwd(), input, expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluateKfdProductGate } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:465` |\n| `evaluatePublicationControlPlaneSnapshot` | function: function evaluatePublicationControlPlaneSnapshot({ repository, workflowPath, publisherWorkflowPath = workflowPath, environment, branch, packageName, publisherMode = \"npm-trusted-publisher\", requiredStatusCheck = \"check\", snapshot, observedAt, expiresAt, } = {}) | { repository, workflowPath, publisherWorkflowPath = workflowPath, environment, branch, packageName, publisherMode = \"npm-trusted-publisher\", requiredStatusCheck = \"check\", snapshot, observedAt, expiresAt, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluatePublicationControlPlaneSnapshot } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-control-plane-audit.js:75` |\n| `executePaperNpmBootstrap` | function: function executePaperNpmBootstrap(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { executePaperNpmBootstrap } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:2840` |\n| `executePaperWorkStart` | function: function executePaperWorkStart(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { executePaperWorkStart } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-work.js:169` |\n| `executePaperWorkSubmitPush` | function: function executePaperWorkSubmitPush(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { executePaperWorkSubmitPush } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-work.js:357` |\n| `executeReleasePropagationPush` | function: function executeReleasePropagationPush({ work, expectedWorkRoot, cwd = process.cwd(), remote = \"origin\", } = {}) | { work, expectedWorkRoot, cwd = process.cwd(), remote = \"origin\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { executeReleasePropagationPush } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-push.js:231` |\n| `explainArtifactPassport` | function: async function explainArtifactPassport(options = {}) | options = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { explainArtifactPassport } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-passport.js:827` |\n| `explainKfdAgentHub` | function: function explainKfdAgentHub({ cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = \"\" } = {}) | { cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { explainKfdAgentHub } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-agent-hub.js:470` |\n| `explainReleaseLineDryRun` | function: function explainReleaseLineDryRun({ cwd = process.cwd(), targetRef, sha = \"\", sourceRef = \"\", tags, publishTransaction = false, publishCommand = \"\", } = {}) | { cwd = process.cwd(), targetRef, sha = \"\", sourceRef = \"\", tags, publishTransaction = false, publishCommand = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { explainReleaseLineDryRun } from \"@kungfu-tech/buildchain\";` | `packages/core/release-line-dry-run.js:127` |\n| `explainReleasePassport` | function: async function explainReleasePassport({ passportLocation, forAudience = \"human\" } = {}) | { passportLocation, forAudience = \"human\" } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { explainReleasePassport } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:2812` |\n| `FAMILY_RELEASE_EVIDENCE_CONTRACT` | constant: const FAMILY_RELEASE_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { FAMILY_RELEASE_EVIDENCE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-candidate.js:5` |\n| `finalizeBuildchainContractWorld` | function: function finalizeBuildchainContractWorld(contractWorld) | contractWorld | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { finalizeBuildchainContractWorld } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-contract.js:762` |\n| `formatCandidateTimelineReport` | function: function formatCandidateTimelineReport(timeline) | timeline | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { formatCandidateTimelineReport } from \"@kungfu-tech/buildchain\";` | `packages/core/candidate-timeline.js:438` |\n| `formatDiagnosticsSummaryTable` | function: function formatDiagnosticsSummaryTable(summary = {}) | summary = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { formatDiagnosticsSummaryTable } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:1786` |\n| `formatReleaseLineDryRun` | function: function formatReleaseLineDryRun(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { formatReleaseLineDryRun } from \"@kungfu-tech/buildchain\";` | `packages/core/release-line-dry-run.js:267` |\n| `getLifecycleStage` | function: function getLifecycleStage(loadedConfig, name) | loadedConfig, name | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { getLifecycleStage } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:1372` |\n| `getNativeDiagnosticsProfile` | function: function getNativeDiagnosticsProfile(loadedConfig) | loadedConfig | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { getNativeDiagnosticsProfile } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:520` |\n| `getPublishContract` | function: function getPublishContract(loadedConfig) | loadedConfig | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { getPublishContract } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:1376` |\n| `getStableReleasePolicy` | function: function getStableReleasePolicy(loadedConfig) | loadedConfig | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { getStableReleasePolicy } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:328` |\n| `getVersionStrategy` | function: function getVersionStrategy(loadedConfig) | loadedConfig | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { getVersionStrategy } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:1500` |\n| `getWorkspaceInfo` | function: function getWorkspaceInfo(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { getWorkspaceInfo } from \"@kungfu-tech/buildchain\";` | `packages/core/package-manager.js:211` |\n| `GITHUB_ARTIFACT_ATTESTATION_EVIDENCE_CONTRACT` | constant: const GITHUB_ARTIFACT_ATTESTATION_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_EVIDENCE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:9` |\n| `GITHUB_ARTIFACT_ATTESTATION_POLICY_CONTRACT` | constant: const GITHUB_ARTIFACT_ATTESTATION_POLICY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_POLICY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:5` |\n| `GITHUB_ARTIFACT_ATTESTATION_PREDICATE_CONTRACT` | constant: const GITHUB_ARTIFACT_ATTESTATION_PREDICATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_PREDICATE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:7` |\n| `GITHUB_ARTIFACT_ATTESTATION_PREDICATE_TYPE` | constant: const GITHUB_ARTIFACT_ATTESTATION_PREDICATE_TYPE | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_PREDICATE_TYPE } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:13` |\n| `GITHUB_ARTIFACT_ATTESTATION_VERIFICATION_CONTRACT` | constant: const GITHUB_ARTIFACT_ATTESTATION_VERIFICATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_VERIFICATION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:11` |\n| `GITHUB_ARTIFACT_ATTESTATION_WORKFLOW` | constant: const GITHUB_ARTIFACT_ATTESTATION_WORKFLOW | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_WORKFLOW } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:15` |\n| `GITHUB_GOVERNANCE_AUTHORITY_CONTRACT` | constant: const GITHUB_GOVERNANCE_AUTHORITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_GOVERNANCE_AUTHORITY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:3` |\n| `GITHUB_GOVERNANCE_RECEIPT_CONTRACT` | constant: const GITHUB_GOVERNANCE_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_GOVERNANCE_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:5` |\n| `GITHUB_GOVERNANCE_ROLLOUT_CONTRACT` | constant: const GITHUB_GOVERNANCE_ROLLOUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_GOVERNANCE_ROLLOUT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:7` |\n| `GITHUB_GOVERNANCE_RULESET_ROLLOUT_CONTRACT` | constant: const GITHUB_GOVERNANCE_RULESET_ROLLOUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_GOVERNANCE_RULESET_ROLLOUT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:9` |\n| `githubArtifactAttestationRequiredPermissions` | function: function githubArtifactAttestationRequiredPermissions() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { githubArtifactAttestationRequiredPermissions } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:640` |\n| `githubArtifactAttestationSemanticRoot` | function: function githubArtifactAttestationSemanticRoot(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { githubArtifactAttestationSemanticRoot } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:91` |\n| `githubArtifactAttestationSha256Buffer` | function: function githubArtifactAttestationSha256Buffer(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { githubArtifactAttestationSha256Buffer } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:83` |\n| `githubArtifactAttestationSha256File` | function: function githubArtifactAttestationSha256File(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { githubArtifactAttestationSha256File } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:87` |\n| `githubGovernanceDigest` | function: function githubGovernanceDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { githubGovernanceDigest } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:163` |\n| `GitHubIssueRequestError` | class: class GitHubIssueRequestError | none | GitHubIssueRequestError | Construction and method errors follow the linked source implementation. | class-dependent | `import { GitHubIssueRequestError } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:23` |\n| `HOMEBREW_TAP_CHECK_CONTRACT` | constant: const HOMEBREW_TAP_CHECK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { HOMEBREW_TAP_CHECK_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/homebrew.js:6` |\n| `HOMEBREW_TAP_FACTS_CONTRACT` | constant: const HOMEBREW_TAP_FACTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { HOMEBREW_TAP_FACTS_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/homebrew.js:5` |\n| `HOMEBREW_TAP_MANIFEST_CONTRACT` | constant: const HOMEBREW_TAP_MANIFEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { HOMEBREW_TAP_MANIFEST_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/homebrew.js:7` |\n| `IMPACT_LEDGER_CONTRACT` | constant: const IMPACT_LEDGER_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { IMPACT_LEDGER_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:30` |\n| `initKfdAgentHub` | function: function initKfdAgentHub({ cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, write = false, force = false } = {}) | { cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, write = false, force = false } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { initKfdAgentHub } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-agent-hub.js:363` |\n| `inspectKfdAgentHub` | function: function inspectKfdAgentHub({ cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = \"\" } = {}) | { cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { inspectKfdAgentHub } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-agent-hub.js:384` |\n| `inspectReleasePropagationPushState` | function: function inspectReleasePropagationPushState({ work: workInput, cwd = process.cwd(), remote = \"origin\", } = {}) | { work: workInput, cwd = process.cwd(), remote = \"origin\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { inspectReleasePropagationPushState } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-push.js:174` |\n| `KFD_AGENT_HUB_ADOPTION_CONTRACT` | constant: const KFD_AGENT_HUB_ADOPTION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_ADOPTION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-agent-hub.js:9` |\n| `KFD_AGENT_HUB_ADOPTION_SCHEMA` | constant: const KFD_AGENT_HUB_ADOPTION_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_ADOPTION_SCHEMA } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-agent-hub.js:12` |\n| `KFD_AGENT_HUB_DECLARATION` | constant: const KFD_AGENT_HUB_DECLARATION | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_DECLARATION } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-agent-hub.js:7` |\n| `KFD_AGENT_HUB_LOCK_CONTRACT` | constant: const KFD_AGENT_HUB_LOCK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_LOCK_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-agent-hub.js:10` |\n| `KFD_AGENT_HUB_OUTPUT_DIR` | constant: const KFD_AGENT_HUB_OUTPUT_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_OUTPUT_DIR } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-agent-hub.js:8` |\n| `KFD_AGENT_HUB_VERIFICATION_CONTRACT` | constant: const KFD_AGENT_HUB_VERIFICATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_VERIFICATION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-agent-hub.js:11` |\n| `KFD_PRODUCT_GATE_CONTRACT` | constant: const KFD_PRODUCT_GATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_PRODUCT_GATE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:11` |\n| `KFD_PRODUCT_GATE_INPUT_CONTRACT` | constant: const KFD_PRODUCT_GATE_INPUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_PRODUCT_GATE_INPUT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:9` |\n| `KFD_PRODUCT_GATE_INPUT_SCHEMA` | constant: const KFD_PRODUCT_GATE_INPUT_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_PRODUCT_GATE_INPUT_SCHEMA } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:55` |\n| `KFD_PRODUCT_GATE_INPUT_SCHEMA_ID` | constant: const KFD_PRODUCT_GATE_INPUT_SCHEMA_ID | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_PRODUCT_GATE_INPUT_SCHEMA_ID } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:15` |\n| `KFD_SUPPORT_PROJECTION_CONTRACT` | constant: const KFD_SUPPORT_PROJECTION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_SUPPORT_PROJECTION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:13` |\n| `KFD_SUPPORT_PROJECTION_SCHEMA` | constant: const KFD_SUPPORT_PROJECTION_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_SUPPORT_PROJECTION_SCHEMA } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:130` |\n| `KFD_SUPPORT_PROJECTION_SCHEMA_ID` | constant: const KFD_SUPPORT_PROJECTION_SCHEMA_ID | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_SUPPORT_PROJECTION_SCHEMA_ID } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:17` |\n| `kfd1` | constant: const kfd1 | none | value | Import does not declare a throw contract. | none-on-import | `import { kfd1 } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd.js:546` |\n| `KFD1_RELEASE_GATE_CONTRACT` | constant: const KFD1_RELEASE_GATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD1_RELEASE_GATE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:9` |\n| `KFD1_WITNESS_SET_CONTRACT` | constant: const KFD1_WITNESS_SET_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD1_WITNESS_SET_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:10` |\n| `kfd2` | constant: const kfd2 | none | value | Import does not declare a throw contract. | none-on-import | `import { kfd2 } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd.js:561` |\n| `KFD2_PRODUCT_CLAIMS_OUTPUT_CONTRACT` | constant: const KFD2_PRODUCT_CLAIMS_OUTPUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_PRODUCT_CLAIMS_OUTPUT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd2-product-claims.js:23` |\n| `KFD2_PRODUCT_CLAIMS_REGISTRY_CONTRACT` | constant: const KFD2_PRODUCT_CLAIMS_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_PRODUCT_CLAIMS_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd2-product-claims.js:19` |\n| `KFD2_PRODUCT_CLAIMS_VALIDATION_CONTRACT` | constant: const KFD2_PRODUCT_CLAIMS_VALIDATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_PRODUCT_CLAIMS_VALIDATION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd2-product-claims.js:21` |\n| `KFD2_RELEASE_TRUST_PASSPORT_CONTRACT` | constant: const KFD2_RELEASE_TRUST_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_RELEASE_TRUST_PASSPORT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:35` |\n| `KFD2_TRUST_PROOF_CONTRACT` | constant: const KFD2_TRUST_PROOF_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_TRUST_PROOF_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:36` |\n| `kfd3` | constant: const kfd3 | none | value | Import does not declare a throw contract. | none-on-import | `import { kfd3 } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd.js:663` |\n| `KFD3_ARTIFACT_WITNESS_CONTRACT` | constant: const KFD3_ARTIFACT_WITNESS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_ARTIFACT_WITNESS_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:13` |\n| `KFD3_CAPABILITY_QUERY_CONTRACT` | constant: const KFD3_CAPABILITY_QUERY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_CAPABILITY_QUERY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd3-surface-register.js:9` |\n| `KFD3_DEFAULT_REGISTRY_PATH` | constant: const KFD3_DEFAULT_REGISTRY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_DEFAULT_REGISTRY_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd3-surface-register.js:10` |\n| `KFD3_PREBUILD_WITNESS_CONTRACT` | constant: const KFD3_PREBUILD_WITNESS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_PREBUILD_WITNESS_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:12` |\n| `KFD3_RELEASE_GATE_CONTRACT` | constant: const KFD3_RELEASE_GATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_RELEASE_GATE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:11` |\n| `KFD3_SURFACE_AUDIT_CONTRACT` | constant: const KFD3_SURFACE_AUDIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_SURFACE_AUDIT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd3-surface-register.js:8` |\n| `KFD3_SURFACE_DETECTION_CONTRACT` | constant: const KFD3_SURFACE_DETECTION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_SURFACE_DETECTION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd3-surface-register.js:7` |\n| `KFD3_SURFACE_REGISTRY_CONTRACT` | constant: const KFD3_SURFACE_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_SURFACE_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd3-surface-register.js:6` |\n| `kfd4` | constant: const kfd4 | none | value | Import does not declare a throw contract. | none-on-import | `import { kfd4 } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd.js:681` |\n| `kfdProductGateDigest` | function: function kfdProductGateDigest(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { kfdProductGateDigest } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:188` |\n| `kfdProductGates` | constant: const kfdProductGates | none | value | Import does not declare a throw contract. | none-on-import | `import { kfdProductGates } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:859` |\n| `KFX_ADMISSION_INPUTS_CONTRACT` | constant: const KFX_ADMISSION_INPUTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFX_ADMISSION_INPUTS_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-verification-envelope.js:7` |\n| `layout` | constant: const layout | none | value | Import does not declare a throw contract. | none-on-import | `import { layout } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd.js:905` |\n| `LEGACY_BUILDCHAIN_CONFIG_PATH` | constant: const LEGACY_BUILDCHAIN_CONFIG_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_CONFIG_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:8` |\n| `LEGACY_BUILDCHAIN_CONTRACT_LOCK_PATH` | constant: const LEGACY_BUILDCHAIN_CONTRACT_LOCK_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_CONTRACT_LOCK_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:10` |\n| `LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH` | constant: const LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:28` |\n| `LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATHS` | constant: const LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATHS | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATHS } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:29` |\n| `LEGACY_BUILDCHAIN_RELEASE_PASSPORT_PATH` | constant: const LEGACY_BUILDCHAIN_RELEASE_PASSPORT_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_RELEASE_PASSPORT_PATH } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:34` |\n| `listArtifactSigningProfiles` | function: function listArtifactSigningProfiles() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { listArtifactSigningProfiles } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing.js:103` |\n| `listKfdSchemas` | function: function listKfdSchemas({ standard = \"\" } = {}) | { standard = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { listKfdSchemas } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd.js:492` |\n| `loadBuildchainConfig` | function: function loadBuildchainConfig(cwd = process.cwd()) | cwd = process.cwd() | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { loadBuildchainConfig } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:158` |\n| `loadConfiguredAnchorManifest` | function: function loadConfiguredAnchorManifest(cwd = process.cwd(), loadedConfig = loadBuildchainConfig(cwd)) | cwd = process.cwd(), loadedConfig = loadBuildchainConfig(cwd) | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { loadConfiguredAnchorManifest } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:1509` |\n| `makeReleasePassportFixtureAssets` | function: function makeReleasePassportFixtureAssets(dir) | dir | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { makeReleasePassportFixtureAssets } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:2841` |\n| `MANUAL_UPSTREAM_PICKUP_CONFIG_CONTRACT` | constant: const MANUAL_UPSTREAM_PICKUP_CONFIG_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { MANUAL_UPSTREAM_PICKUP_CONFIG_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-pickup.js:16` |\n| `MANUAL_UPSTREAM_PICKUP_PLAN_CONTRACT` | constant: const MANUAL_UPSTREAM_PICKUP_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { MANUAL_UPSTREAM_PICKUP_PLAN_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-pickup.js:18` |\n| `markStableCandidatePromoted` | function: function markStableCandidatePromoted(ledgerInput, versionInput, { stableTag = \"\", stableSha = \"\", now = new Date().toISOString() } = {}) | ledgerInput, versionInput, { stableTag = \"\", stableSha = \"\", now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { markStableCandidatePromoted } from \"@kungfu-tech/buildchain\";` | `packages/core/stable-candidate-ledger.js:229` |\n| `migrateBuildchainLayout` | function: function migrateBuildchainLayout({ cwd = process.cwd(), write = false, force = false } = {}) | { cwd = process.cwd(), write = false, force = false } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { migrateBuildchainLayout } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:287` |\n| `normalizeBuildchainConfig` | function: function normalizeBuildchainConfig(config) | config | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeBuildchainConfig } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:181` |\n| `normalizeBuildchainLogEvent` | function: function normalizeBuildchainLogEvent(input = {}, defaults = {}) | input = {}, defaults = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { normalizeBuildchainLogEvent } from \"@kungfu-tech/buildchain\";` | `packages/core/logging.js:45` |\n| `normalizeCandidateTimelineEvent` | function: function normalizeCandidateTimelineEvent(input = {}) | input = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeCandidateTimelineEvent } from \"@kungfu-tech/buildchain\";` | `packages/core/candidate-timeline.js:74` |\n| `normalizeControllerReceiptReferences` | function: function normalizeControllerReceiptReferences({ receipts = [], references = [], expectedSourceSha = \"\", acceptedSourceShas = [], expectedRuntimeSha = \"\", requirePassed = false, } = {}) | { receipts = [], references = [], expectedSourceSha = \"\", acceptedSourceShas = [], expectedRuntimeSha = \"\", requirePassed = false, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeControllerReceiptReferences } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:531` |\n| `normalizeGitHubArtifactAttestationPolicy` | function: function normalizeGitHubArtifactAttestationPolicy(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeGitHubArtifactAttestationPolicy } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:158` |\n| `normalizeGithubBranchProtectionSnapshot` | function: function normalizeGithubBranchProtectionSnapshot(protection = {}) | protection = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { normalizeGithubBranchProtectionSnapshot } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:1025` |\n| `normalizeGithubRulesetSnapshot` | function: function normalizeGithubRulesetSnapshot(ruleset = {}) | ruleset = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { normalizeGithubRulesetSnapshot } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:1095` |\n| `normalizeIssueRepository` | function: function normalizeIssueRepository(repository = DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY) | repository = DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeIssueRepository } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:33` |\n| `normalizeKfd1ContractWorldWitness` | function: function normalizeKfd1ContractWorldWitness(witness, { metadata = resolveKfd1Metadata() } = {}) | witness, { metadata = resolveKfd1Metadata() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfd1ContractWorldWitness } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:897` |\n| `normalizeKfd3CollaborationInterfaceArtifactWitness` | function: function normalizeKfd3CollaborationInterfaceArtifactWitness(witness, { metadata = resolveKfd3Metadata() } = {}) | witness, { metadata = resolveKfd3Metadata() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfd3CollaborationInterfaceArtifactWitness } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:738` |\n| `normalizeKfd3CollaborationInterfacePrebuildWitness` | function: function normalizeKfd3CollaborationInterfacePrebuildWitness(witness, { metadata = resolveKfd3Metadata() } = {}) | witness, { metadata = resolveKfd3Metadata() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfd3CollaborationInterfacePrebuildWitness } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:667` |\n| `normalizeKfd3DistributionDeclaration` | function: function normalizeKfd3DistributionDeclaration(distribution, { surfaceId = \"surface\" } = {}) | distribution, { surfaceId = \"surface\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfd3DistributionDeclaration } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd3-surface-register.js:73` |\n| `normalizeKfdStandardId` | function: function normalizeKfdStandardId(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfdStandardId } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd.js:455` |\n| `normalizeLifecycleStage` | function: function normalizeLifecycleStage(stage, label = \"lifecycle stage\", lifecycle = {}) | stage, label = \"lifecycle stage\", lifecycle = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeLifecycleStage } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:1333` |\n| `normalizeManualUpstreamPickupConfig` | function: function normalizeManualUpstreamPickupConfig(input) | input | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeManualUpstreamPickupConfig } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-pickup.js:118` |\n| `normalizePackageReleasePropagationConfig` | function: function normalizePackageReleasePropagationConfig(input) | input | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizePackageReleasePropagationConfig } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-capture.js:63` |\n| `normalizeReleasePropagationGraph` | function: function normalizeReleasePropagationGraph(input) | input | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeReleasePropagationGraph } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation.js:163` |\n| `normalizeSiteUpstreamIntent` | function: function normalizeSiteUpstreamIntent(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeSiteUpstreamIntent } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-agent-entry.js:77` |\n| `normalizeStableCandidateLedger` | function: function normalizeStableCandidateLedger(input, expected = {}) | input, expected = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeStableCandidateLedger } from \"@kungfu-tech/buildchain\";` | `packages/core/stable-candidate-ledger.js:76` |\n| `PACKAGE_RELEASE_PROPAGATION_CONFIG_CONTRACT` | constant: const PACKAGE_RELEASE_PROPAGATION_CONFIG_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PACKAGE_RELEASE_PROPAGATION_CONFIG_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-capture.js:17` |\n| `PAPER_ALPHA_PLAN_CONTRACT` | constant: const PAPER_ALPHA_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_ALPHA_PLAN_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:90` |\n| `PAPER_BUILD_PLAN_CONTRACT` | constant: const PAPER_BUILD_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_BUILD_PLAN_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:89` |\n| `PAPER_FLEET_AUDIT_CONTRACT` | constant: const PAPER_FLEET_AUDIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_FLEET_AUDIT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-fleet.js:19` |\n| `PAPER_FLEET_UPDATE_PLAN_CONTRACT` | constant: const PAPER_FLEET_UPDATE_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_FLEET_UPDATE_PLAN_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-fleet.js:20` |\n| `PAPER_MIGRATION_CONTRACT` | constant: const PAPER_MIGRATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_MIGRATION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:82` |\n| `PAPER_NPM_BOOTSTRAP_CONTRACT` | constant: const PAPER_NPM_BOOTSTRAP_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_NPM_BOOTSTRAP_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:85` |\n| `PAPER_PATHS` | constant: const PAPER_PATHS | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_PATHS } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-repository.js:7` |\n| `PAPER_PREFLIGHT_CONTRACT` | constant: const PAPER_PREFLIGHT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_PREFLIGHT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:83` |\n| `PAPER_RESUME_PLAN_CONTRACT` | constant: const PAPER_RESUME_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_RESUME_PLAN_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:91` |\n| `PAPER_SCAFFOLD_CONTRACT` | constant: const PAPER_SCAFFOLD_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_SCAFFOLD_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:81` |\n| `PAPER_STATE_ORDER` | constant: const PAPER_STATE_ORDER | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_STATE_ORDER } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:94` |\n| `PAPER_STATUS_CONTRACT` | constant: const PAPER_STATUS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_STATUS_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:84` |\n| `PAPER_VISIBILITY_CONTRACT` | constant: const PAPER_VISIBILITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_VISIBILITY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:92` |\n| `PAPER_WORK_START_PLAN_CONTRACT` | constant: const PAPER_WORK_START_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_WORK_START_PLAN_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-work.js:17` |\n| `PAPER_WORK_SUBMIT_PLAN_CONTRACT` | constant: const PAPER_WORK_SUBMIT_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_WORK_SUBMIT_PLAN_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-work.js:19` |\n| `paperFleetTransitionWorkspace` | function: function paperFleetTransitionWorkspace(workspaceText, lockText) | workspaceText, lockText | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { paperFleetTransitionWorkspace } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-fleet.js:290` |\n| `parseCodeowners` | function: function parseCodeowners(source) | source | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { parseCodeowners } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:401` |\n| `parseIssueLabels` | function: function parseIssueLabels(input = DEFAULT_LABELS) | input = DEFAULT_LABELS | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { parseIssueLabels } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:41` |\n| `planBuildchainLayoutMigration` | function: function planBuildchainLayoutMigration({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { planBuildchainLayoutMigration } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:265` |\n| `planPaperFleetUpdate` | function: function planPaperFleetUpdate(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { planPaperFleetUpdate } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-fleet.js:209` |\n| `planPaperMigration` | function: function planPaperMigration({ cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainSha = \"\", } = {}) | { cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainSha = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { planPaperMigration } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:1013` |\n| `planPaperScaffold` | function: function planPaperScaffold({ cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainRef = \"v3\", buildchainSha = \"\", name = path.basename(path.resolve(cwd)), title = \"\", packageName = \"\", repository = \"\", version = \"0.1.0-alpha.0\", siteBaseUrl = \"\", } = {}) | { cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainRef = \"v3\", buildchainSha = \"\", name = path.basename(path.resolve(cwd)), title = \"\", packageName = \"\", repository = \"\", version = \"0.1.0-alpha.0\", siteBaseUrl = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { planPaperScaffold } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:702` |\n| `planReleaseLineBootstrap` | function: function planReleaseLineBootstrap({ cwd = process.cwd(), major, minor, sourceRef = \"\", initialVersion = \"\", requiredStatusCheck = \"check\", setDefault = true, createAlphaPr = true, approvalCount = 1, bootstrapBranch = \"\", } = {}) | { cwd = process.cwd(), major, minor, sourceRef = \"\", initialVersion = \"\", requiredStatusCheck = \"check\", setDefault = true, createAlphaPr = true, approvalCount = 1, bootstrapBranch = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { planReleaseLineBootstrap } from \"@kungfu-tech/buildchain\";` | `packages/core/release-line-bootstrap.js:140` |\n| `planReleasePropagation` | function: function planReleasePropagation({ graph: graphInput, upstreamRelease: releaseInput, sourceNode = \"\" } = {}) | { graph: graphInput, upstreamRelease: releaseInput, sourceNode = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { planReleasePropagation } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation.js:249` |\n| `planSiteUpstreamAgentEntry` | function: function planSiteUpstreamAgentEntry({ sourceId: sourceInput, channel = \"\", handoffWork = null, } = {}) | { sourceId: sourceInput, channel = \"\", handoffWork = null, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { planSiteUpstreamAgentEntry } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-agent-entry.js:134` |\n| `planTransactionRecovery` | function: function planTransactionRecovery({ transaction, evidence, validation, explicitOverride = false, } = {}) | { transaction, evidence, validation, explicitOverride = false, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { planTransactionRecovery } from \"@kungfu-tech/buildchain\";` | `packages/core/publish-transaction.js:769` |\n| `prepareGitHubArtifactAttestation` | function: function prepareGitHubArtifactAttestation({ subjectPath, platformManifestPath, releasePassportPath, policy, expectedBuildchainRef = \"\", expectedCallerRepository = \"\", expectedSourceSha = \"\", } = {}) | { subjectPath, platformManifestPath, releasePassportPath, policy, expectedBuildchainRef = \"\", expectedCallerRepository = \"\", expectedSourceSha = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { prepareGitHubArtifactAttestation } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:250` |\n| `preparePublicationNpmPackage` | function: function preparePublicationNpmPackage({ cwd = process.cwd(), outputDir = \".buildchain/publication/npm-package\", packageName = \"\", } = {}) | { cwd = process.cwd(), outputDir = \".buildchain/publication/npm-package\", packageName = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { preparePublicationNpmPackage } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-package.js:120` |\n| `PRODUCT_MECHANISM_CONTRACT` | constant: const PRODUCT_MECHANISM_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PRODUCT_MECHANISM_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:32` |\n| `projectArtifactVerificationEnvelopeToKfx` | function: function projectArtifactVerificationEnvelopeToKfx({ envelope, assessmentTime = Math.floor(Date.now() / 1000), expectedEnvelopeRoot = \"\", expectedIssuer = \"\", expectedPublisher = \"\", expectedContractVersion = \"\", } = {}) | { envelope, assessmentTime = Math.floor(Date.now() / 1000), expectedEnvelopeRoot = \"\", expectedIssuer = \"\", expectedPublisher = \"\", expectedContractVersion = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { projectArtifactVerificationEnvelopeToKfx } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-verification-envelope.js:359` |\n| `PUBLICATION_ADMISSION_CONTRACT` | constant: const PUBLICATION_ADMISSION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ADMISSION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:10` |\n| `PUBLICATION_ARTIFACT_ARCHIVE_CONTRACT` | constant: const PUBLICATION_ARTIFACT_ARCHIVE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_ARCHIVE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-artifact.js:9` |\n| `PUBLICATION_ARTIFACT_CANDIDATE_CONTRACT` | constant: const PUBLICATION_ARTIFACT_CANDIDATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_CANDIDATE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-artifact-candidate.js:5` |\n| `PUBLICATION_ARTIFACT_MANIFEST_CONTRACT` | constant: const PUBLICATION_ARTIFACT_MANIFEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_MANIFEST_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-artifact.js:7` |\n| `PUBLICATION_ARTIFACT_MANIFEST_SET_CONTRACT` | constant: const PUBLICATION_ARTIFACT_MANIFEST_SET_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_MANIFEST_SET_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:24` |\n| `PUBLICATION_ARTIFACT_PASSPORT_CONTRACT` | constant: const PUBLICATION_ARTIFACT_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_PASSPORT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-artifact.js:8` |\n| `PUBLICATION_ARTIFACT_REGISTRY_CONTRACT` | constant: const PUBLICATION_ARTIFACT_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-artifact.js:10` |\n| `PUBLICATION_AUTHORITY_CLASSES` | constant: const PUBLICATION_AUTHORITY_CLASSES | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_AUTHORITY_CLASSES } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:27` |\n| `PUBLICATION_AUTHORITY_REGISTRY_CONTRACT` | constant: const PUBLICATION_AUTHORITY_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_AUTHORITY_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:8` |\n| `PUBLICATION_CAPABILITY_CONTRACT` | constant: const PUBLICATION_CAPABILITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_CAPABILITY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:12` |\n| `PUBLICATION_CONTROL_PLANE_AUDIT_CONTRACT` | constant: const PUBLICATION_CONTROL_PLANE_AUDIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_CONTROL_PLANE_AUDIT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:16` |\n| `PUBLICATION_GATE_DECISION_CONTRACT` | constant: const PUBLICATION_GATE_DECISION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_GATE_DECISION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:18` |\n| `PUBLICATION_NPM_PACKAGE_CONTRACT` | constant: const PUBLICATION_NPM_PACKAGE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_NPM_PACKAGE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-package.js:6` |\n| `PUBLICATION_QUALIFICATION_RECEIPT_CONTRACT` | constant: const PUBLICATION_QUALIFICATION_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_QUALIFICATION_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:22` |\n| `PUBLICATION_REPRODUCIBILITY_RECEIPT_CONTRACT` | constant: const PUBLICATION_REPRODUCIBILITY_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_REPRODUCIBILITY_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-reproducibility.js:12` |\n| `PUBLICATION_SEALED_BUNDLE_CONTRACT` | constant: const PUBLICATION_SEALED_BUNDLE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_SEALED_BUNDLE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-sealed-bundle.js:10` |\n| `publicationArtifactCandidateDigest` | function: function publicationArtifactCandidateDigest(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { publicationArtifactCandidateDigest } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-artifact-candidate.js:19` |\n| `publicationAuthorityDigest` | function: function publicationAuthorityDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { publicationAuthorityDigest } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:72` |\n| `publicationGateAggregateBindings` | function: function publicationGateAggregateBindings(gateAggregate) | gateAggregate | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { publicationGateAggregateBindings } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:408` |\n| `qualifyStableCandidate` | function: function qualifyStableCandidate(ledgerInput, observation, { minimumSoakSeconds = 3600, now = new Date().toISOString() } = {}) | ledgerInput, observation, { minimumSoakSeconds = 3600, now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { qualifyStableCandidate } from \"@kungfu-tech/buildchain\";` | `packages/core/stable-candidate-ledger.js:139` |\n| `queryKfd3Capabilities` | function: async function queryKfd3Capabilities({ cwd = process.cwd(), product = \"\", registryPath = \"\", passportLocation = \"\", artifactPath = \"\", } = {}) | { cwd = process.cwd(), product = \"\", registryPath = \"\", passportLocation = \"\", artifactPath = \"\", } = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { queryKfd3Capabilities } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd3-surface-register.js:824` |\n| `readBuildchainContractLock` | function: function readBuildchainContractLock(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readBuildchainContractLock } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-contract.js:838` |\n| `readBuildchainContractWorld` | function: function readBuildchainContractWorld(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readBuildchainContractWorld } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-contract.js:818` |\n| `readBuildchainLogEvents` | function: function readBuildchainLogEvents(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readBuildchainLogEvents } from \"@kungfu-tech/buildchain\";` | `packages/core/logging.js:75` |\n| `readDiagnosticsArtifact` | function: function readDiagnosticsArtifact(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readDiagnosticsArtifact } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:1468` |\n| `readJsonFromLocation` | function: async function readJsonFromLocation(location, redirectCount = 0, { timeoutMs = 15_000 } = {}) | location, redirectCount = 0, { timeoutMs = 15_000 } = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readJsonFromLocation } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:2694` |\n| `readKfd2ProductClaimsRegistry` | function: function readKfd2ProductClaimsRegistry({ cwd = process.cwd(), registryPath = BUILDCHAIN_KFD2_REGISTRY_PATH, } = {}) | { cwd = process.cwd(), registryPath = BUILDCHAIN_KFD2_REGISTRY_PATH, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readKfd2ProductClaimsRegistry } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd2-product-claims.js:137` |\n| `readKfd3SurfaceRegistry` | function: function readKfd3SurfaceRegistry({ cwd = process.cwd(), registryPath = \"\" } = {}) | { cwd = process.cwd(), registryPath = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readKfd3SurfaceRegistry } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd3-surface-register.js:455` |\n| `readKfdSchema` | function: function readKfdSchema({ standard, schema = \"\" } = {}) | { standard, schema = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readKfdSchema } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd.js:520` |\n| `README_BADGE_BLOCK_END` | constant: const README_BADGE_BLOCK_END | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_BLOCK_END } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:15` |\n| `README_BADGE_BLOCK_START` | constant: const README_BADGE_BLOCK_START | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_BLOCK_START } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:14` |\n| `README_BADGE_FACTS_CONTRACT` | constant: const README_BADGE_FACTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_FACTS_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:12` |\n| `README_BADGE_HOSTED_BASE_URL` | constant: const README_BADGE_HOSTED_BASE_URL | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_HOSTED_BASE_URL } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:16` |\n| `readOptionalIssueBodyFile` | function: function readOptionalIssueBodyFile(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readOptionalIssueBodyFile } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:385` |\n| `readPublishEvidence` | function: function readPublishEvidence(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readPublishEvidence } from \"@kungfu-tech/buildchain\";` | `packages/core/publish-transaction.js:564` |\n| `readReadme` | function: function readReadme({ cwd = process.cwd(), readmePath = \"README.md\" } = {}) | { cwd = process.cwd(), readmePath = \"README.md\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readReadme } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:891` |\n| `readReleasePropagationJson` | function: function readReleasePropagationJson(value, { cwd = process.cwd(), label = \"json\" } = {}) | value, { cwd = process.cwd(), label = \"json\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readReleasePropagationJson } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation.js:305` |\n| `readReleaseTransaction` | function: function readReleaseTransaction(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readReleaseTransaction } from \"@kungfu-tech/buildchain\";` | `packages/core/publish-transaction.js:367` |\n| `recordReleaseActivationPhase` | function: function recordReleaseActivationPhase(transaction, phaseId, { receiptRoots = [], failure = \"\" } = {}) | transaction, phaseId, { receiptRoots = [], failure = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { recordReleaseActivationPhase } from \"@kungfu-tech/buildchain\";` | `packages/core/release-activation-transaction.js:217` |\n| `recordReleasePropagationStage` | function: function recordReleasePropagationStage({ work, expectedWorkRoot, receipt } = {}) | { work, expectedWorkRoot, receipt } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { recordReleasePropagationStage } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-work-transitions.js:45` |\n| `redactBuildchainLogAttributes` | function: function redactBuildchainLogAttributes(attributes = {}) | attributes = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { redactBuildchainLogAttributes } from \"@kungfu-tech/buildchain\";` | `packages/core/logging.js:33` |\n| `redactDiagnosticsValue` | function: function redactDiagnosticsValue(key, value, pattern = DEFAULT_SECRET_KEY_PATTERN) | key, value, pattern = DEFAULT_SECRET_KEY_PATTERN | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { redactDiagnosticsValue } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:953` |\n| `redactIssueText` | function: function redactIssueText(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { redactIssueText } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:51` |\n| `registerKfd3Surfaces` | function: function registerKfd3Surfaces({ cwd = process.cwd(), registryPath = \"\", kinds = [], artifactPath = \"\", product = {}, } = {}) | { cwd = process.cwd(), registryPath = \"\", kinds = [], artifactPath = \"\", product = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { registerKfd3Surfaces } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd3-surface-register.js:502` |\n| `registerStableCandidate` | function: function registerStableCandidate(ledgerInput, candidateInput, { now = new Date().toISOString() } = {}) | ledgerInput, candidateInput, { now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { registerStableCandidate } from \"@kungfu-tech/buildchain\";` | `packages/core/stable-candidate-ledger.js:106` |\n| `RELEASE_ACTIVATION_CONTRACT` | constant: const RELEASE_ACTIVATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_ACTIVATION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-activation-transaction.js:3` |\n| `RELEASE_ACTIVATION_PHASES` | constant: const RELEASE_ACTIVATION_PHASES | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_ACTIVATION_PHASES } from \"@kungfu-tech/buildchain\";` | `packages/core/release-activation-transaction.js:8` |\n| `RELEASE_ACTIVATION_RECEIPT_SET_CONTRACT` | constant: const RELEASE_ACTIVATION_RECEIPT_SET_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_ACTIVATION_RECEIPT_SET_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-activation-transaction.js:5` |\n| `RELEASE_CANDIDATE_PASSPORT_CONTRACT` | constant: const RELEASE_CANDIDATE_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_CANDIDATE_PASSPORT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-candidate.js:4` |\n| `RELEASE_CHECK_REPORT_CONTRACT` | constant: const RELEASE_CHECK_REPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_CHECK_REPORT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:33` |\n| `RELEASE_EVIDENCE_ATTACHMENT_CONTRACT` | constant: const RELEASE_EVIDENCE_ATTACHMENT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_EVIDENCE_ATTACHMENT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:34` |\n| `RELEASE_PASSPORT_CHECK_MANIFEST_CONTRACT` | constant: const RELEASE_PASSPORT_CHECK_MANIFEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PASSPORT_CHECK_MANIFEST_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport-contract.js:9` |\n| `RELEASE_PASSPORT_CONTRACT` | constant: const RELEASE_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PASSPORT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:28` |\n| `RELEASE_PASSPORT_SCHEMA` | constant: const RELEASE_PASSPORT_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PASSPORT_SCHEMA } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport-contract.js:16` |\n| `RELEASE_PASSPORT_SCHEMA_ID` | constant: const RELEASE_PASSPORT_SCHEMA_ID | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PASSPORT_SCHEMA_ID } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport-contract.js:7` |\n| `RELEASE_PROPAGATION_FAILURE_MATRIX` | constant: const RELEASE_PROPAGATION_FAILURE_MATRIX | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_FAILURE_MATRIX } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-agent-entry.js:66` |\n| `RELEASE_PROPAGATION_FAILURE_MATRIX_CONTRACT` | constant: const RELEASE_PROPAGATION_FAILURE_MATRIX_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_FAILURE_MATRIX_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-agent-entry.js:11` |\n| `RELEASE_PROPAGATION_GRAPH_CONTRACT` | constant: const RELEASE_PROPAGATION_GRAPH_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_GRAPH_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation.js:15` |\n| `RELEASE_PROPAGATION_LOCK_CONTRACT` | constant: const RELEASE_PROPAGATION_LOCK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_LOCK_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation.js:17` |\n| `RELEASE_PROPAGATION_PLAN_CONTRACT` | value: RELEASE_PROPAGATION_PLAN_CONTRACT | none | unknown | No narrower error contract was mechanically discoverable. | unknown | `import { RELEASE_PROPAGATION_PLAN_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation.js:1` |\n| `RELEASE_PROPAGATION_PUSH_PLAN_CONTRACT` | constant: const RELEASE_PROPAGATION_PUSH_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_PUSH_PLAN_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-push.js:14` |\n| `RELEASE_PROPAGATION_PUSH_RESULT_CONTRACT` | constant: const RELEASE_PROPAGATION_PUSH_RESULT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_PUSH_RESULT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-push.js:16` |\n| `RELEASE_PROPAGATION_RECEIPT_CONTRACT` | constant: const RELEASE_PROPAGATION_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation.js:18` |\n| `RELEASE_PROPAGATION_STAGE_RECEIPT_CONTRACT` | constant: const RELEASE_PROPAGATION_STAGE_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_STAGE_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-work-constants.js:2` |\n| `RELEASE_PROPAGATION_WORK_CONTRACT` | constant: const RELEASE_PROPAGATION_WORK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_WORK_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-work-constants.js:1` |\n| `RELEASE_PROPAGATION_WORK_STAGES` | constant: const RELEASE_PROPAGATION_WORK_STAGES | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_WORK_STAGES } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-work-constants.js:4` |\n| `releaseActivationRoot` | function: function releaseActivationRoot(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { releaseActivationRoot } from \"@kungfu-tech/buildchain\";` | `packages/core/release-activation-transaction.js:38` |\n| `renderBadgeBundleBlock` | function: function renderBadgeBundleBlock(facts) | facts | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { renderBadgeBundleBlock } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:840` |\n| `renderBuildchainContractDriftIssueBody` | function: function renderBuildchainContractDriftIssueBody({ repository = \"\", workflow = \"\", runUrl = \"\", lockPath = \"\", evaluation, } = {}) | { repository = \"\", workflow = \"\", runUrl = \"\", lockPath = \"\", evaluation, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { renderBuildchainContractDriftIssueBody } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-contract.js:957` |\n| `renderHomebrewFormula` | function: function renderHomebrewFormula(facts) | facts | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { renderHomebrewFormula } from \"@kungfu-tech/buildchain\";` | `packages/core/homebrew.js:290` |\n| `renderKfd2ProductClaimOutputs` | function: function renderKfd2ProductClaimOutputs({ cwd = process.cwd(), registryPath = BUILDCHAIN_KFD2_REGISTRY_PATH, outputDir = BUILDCHAIN_KFD2_DIR, version = \"\", channel = \"\", tag = \"\", sourceSha = \"\", } = {}) | { cwd = process.cwd(), registryPath = BUILDCHAIN_KFD2_REGISTRY_PATH, outputDir = BUILDCHAIN_KFD2_DIR, version = \"\", channel = \"\", tag = \"\", sourceSha = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { renderKfd2ProductClaimOutputs } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd2-product-claims.js:321` |\n| `renderReadmeBadgeBlock` | function: function renderReadmeBadgeBlock(facts) | facts | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { renderReadmeBadgeBlock } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:836` |\n| `repairReleasePropagationWork` | function: function repairReleasePropagationWork({ work, expectedWorkRoot, receipt } = {}) | { work, expectedWorkRoot, receipt } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { repairReleasePropagationWork } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-work-transitions.js:88` |\n| `reportBuildchainIssue` | function: async function reportBuildchainIssue(options = {}) | options = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { reportBuildchainIssue } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:292` |\n| `reportWorkflowFrictionIssue` | function: async function reportWorkflowFrictionIssue(options = {}) | options = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { reportWorkflowFrictionIssue } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:378` |\n| `resolveArtifactSigningProfile` | function: function resolveArtifactSigningProfile({ profile = \"auto\", platform = \"\", artifactKind = \"binary\", } = {}) | { profile = \"auto\", platform = \"\", artifactKind = \"binary\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveArtifactSigningProfile } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing.js:111` |\n| `resolveArtifactSubject` | function: async function resolveArtifactSubject(subject, { cwd = process.cwd(), subjectDigest = \"\", subjectKind = \"\", npmRegistryBaseUrl = \"\", } = {}) | subject, { cwd = process.cwd(), subjectDigest = \"\", subjectKind = \"\", npmRegistryBaseUrl = \"\", } = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveArtifactSubject } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-passport.js:368` |\n| `resolveBuildchainConfigPath` | function: function resolveBuildchainConfigPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveBuildchainConfigPath } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:67` |\n| `resolveBuildchainContractLockPath` | function: function resolveBuildchainContractLockPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveBuildchainContractLockPath } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:74` |\n| `resolveGithubGovernanceTargetPolicy` | function: function resolveGithubGovernanceTargetPolicy({ descriptor = BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY, repository, targetRef, } = {}) | { descriptor = BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY, repository, targetRef, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveGithubGovernanceTargetPolicy } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:607` |\n| `resolveKfd1Metadata` | function: function resolveKfd1Metadata() | none | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveKfd1Metadata } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:89` |\n| `resolveKfd2ProductClaimsRegistryPath` | function: function resolveKfd2ProductClaimsRegistryPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveKfd2ProductClaimsRegistryPath } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:81` |\n| `resolveKfd3Metadata` | function: function resolveKfd3Metadata({ requireSchemas = false } = {}) | { requireSchemas = false } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveKfd3Metadata } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:128` |\n| `resolveKfd3SurfaceRegistryPath` | function: function resolveKfd3SurfaceRegistryPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveKfd3SurfaceRegistryPath } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:85` |\n| `resolveNpmRegistryRelease` | function: function resolveNpmRegistryRelease({ source: sourceInput, channel, packageMetadata, attestations, }) | { source: sourceInput, channel, packageMetadata, attestations, } | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveNpmRegistryRelease } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-pickup.js:167` |\n| `resolvePaperRepository` | function: function resolvePaperRepository(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolvePaperRepository } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-repository.js:133` |\n| `resolvePropagationChannel` | function: function resolvePropagationChannel(edge, upstreamChannel) | edge, upstreamChannel | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolvePropagationChannel } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation.js:190` |\n| `resolvePublicationCandidateFile` | function: function resolvePublicationCandidateFile(files = [], candidatePath) | files = [], candidatePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolvePublicationCandidateFile } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-artifact-candidate.js:23` |\n| `resolveReleasePassportPath` | function: function resolveReleasePassportPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveReleasePassportPath } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-layout.js:92` |\n| `resumeReleasePropagationWork` | function: function resumeReleasePropagationWork(work) | work | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resumeReleasePropagationWork } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-work.js:518` |\n| `revokeStableCandidate` | function: function revokeStableCandidate(ledgerInput, versionInput, { reason, actor = \"\", now = new Date().toISOString() } = {}) | ledgerInput, versionInput, { reason, actor = \"\", now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { revokeStableCandidate } from \"@kungfu-tech/buildchain\";` | `packages/core/stable-candidate-ledger.js:185` |\n| `rollbackReleaseActivationTransaction` | function: function rollbackReleaseActivationTransaction(transaction, { toSiteSourceSha, reason } = {}) | transaction, { toSiteSourceSha, reason } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { rollbackReleaseActivationTransaction } from \"@kungfu-tech/buildchain\";` | `packages/core/release-activation-transaction.js:290` |\n| `runLifecycleStage` | function: function runLifecycleStage({ cwd = process.cwd(), loadedConfig, name, stage, env: extraEnv, timeoutMinutes }) | { cwd = process.cwd(), loadedConfig, name, stage, env: extraEnv, timeoutMinutes } | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { runLifecycleStage } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:1380` |\n| `RUNNER_PROVENANCE_CLASSES` | constant: const RUNNER_PROVENANCE_CLASSES | none | value | Import does not declare a throw contract. | none-on-import | `import { RUNNER_PROVENANCE_CLASSES } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:36` |\n| `RUNNER_PROVENANCE_CONTRACT` | constant: const RUNNER_PROVENANCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RUNNER_PROVENANCE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:14` |\n| `schemas` | constant: const schemas | none | value | Import does not declare a throw contract. | none-on-import | `import { schemas } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd.js:495` |\n| `sealArtifactVerificationReport` | function: function sealArtifactVerificationReport({ report, bindings, kfdAssessment, issuedAt, expiresAt, revocation, } = {}) | { report, bindings, kfdAssessment, issuedAt, expiresAt, revocation, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sealArtifactVerificationReport } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-verification-envelope.js:314` |\n| `selectStableCandidate` | function: function selectStableCandidate(ledgerInput, { releaseNow = \"\", now = new Date().toISOString() } = {}) | ledgerInput, { releaseNow = \"\", now = new Date().toISOString() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { selectStableCandidate } from \"@kungfu-tech/buildchain\";` | `packages/core/stable-candidate-ledger.js:206` |\n| `setStableCandidateHold` | function: function setStableCandidateHold(ledgerInput, enabled, { reason = \"\", now = new Date().toISOString() } = {}) | ledgerInput, enabled, { reason = \"\", now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { setStableCandidateHold } from \"@kungfu-tech/buildchain\";` | `packages/core/stable-candidate-ledger.js:198` |\n| `sha256BuildchainContractJson` | function: function sha256Json(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { sha256BuildchainContractJson } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-contract.js:30` |\n| `sha256File` | function: function sha256File(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write, subprocess | `import { sha256File } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:216` |\n| `sha256Json` | function: function sha256Json(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sha256Json } from \"@kungfu-tech/buildchain\";` | `packages/core/release-candidate.js:90` |\n| `sha256KfdJson` | function: function sha256Json(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { sha256KfdJson } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:50` |\n| `sha256Text` | function: function sha256Text(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sha256Text } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:138` |\n| `sha512IntegrityBuffer` | function: function sha512IntegrityBuffer(buffer) | buffer | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { sha512IntegrityBuffer } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-passport.js:34` |\n| `sha512IntegrityFile` | function: function sha512IntegrityFile(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sha512IntegrityFile } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-passport.js:38` |\n| `shellJoin` | function: function shellJoin(command) | command | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { shellJoin } from \"@kungfu-tech/buildchain\";` | `packages/core/package-manager.js:114` |\n| `signDetachedArtifactRequest` | function: function signDetachedArtifactRequest({ request, privateKey, keyId, authority = {}, } = {}) | { request, privateKey, keyId, authority = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { signDetachedArtifactRequest } from \"@kungfu-tech/buildchain\";` | `packages/core/detached-artifact-signature.js:36` |\n| `SITE_UPSTREAM_AGENT_ENTRY_CONTRACT` | constant: const SITE_UPSTREAM_AGENT_ENTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { SITE_UPSTREAM_AGENT_ENTRY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-agent-entry.js:9` |\n| `STABLE_CANDIDATE_LEDGER_CONTRACT` | constant: const STABLE_CANDIDATE_LEDGER_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { STABLE_CANDIDATE_LEDGER_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/stable-candidate-ledger.js:1` |\n| `STABLE_CANDIDATE_STATES` | constant: const STABLE_CANDIDATE_STATES | none | value | Import does not declare a throw contract. | none-on-import | `import { STABLE_CANDIDATE_STATES } from \"@kungfu-tech/buildchain\";` | `packages/core/stable-candidate-ledger.js:2` |\n| `stableCandidatePromotionRefs` | function: function stableCandidatePromotionRefs(candidateInput, targetBranch) | candidateInput, targetBranch | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { stableCandidatePromotionRefs } from \"@kungfu-tech/buildchain\";` | `packages/core/stable-candidate-ledger.js:264` |\n| `startProcessSampler` | function: function startProcessSampler({ rootPid = process.pid, intervalMs = 15000, label = \"\", command = \"\", args = [], env = process.env, requestedParallelism = 0, onSample = () => undefined, cwd = process.cwd(), } = {}) | { rootPid = process.pid, intervalMs = 15000, label = \"\", command = \"\", args = [], env = process.env, requestedParallelism = 0, onSample = () => undefined, cwd = process.cwd(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { startProcessSampler } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:1362` |\n| `summarizeBuildchainLogEvents` | function: function summarizeBuildchainLogEvents(input = {}) | input = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { summarizeBuildchainLogEvents } from \"@kungfu-tech/buildchain\";` | `packages/core/logging.js:192` |\n| `summarizeDiagnosticsArtifacts` | function: function summarizeDiagnosticsArtifacts(inputs = []) | inputs = [] | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { summarizeDiagnosticsArtifacts } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:1824` |\n| `summarizeLifecycleObservability` | function: function summarizeLifecycleObservability({ events = [], logPath = \"\", artifactScanDurationMs = 0, artifactUploadDurationMs = 0, totalBytes = 0, fileCount = 0, } = {}) | { events = [], logPath = \"\", artifactScanDurationMs = 0, artifactUploadDurationMs = 0, totalBytes = 0, fileCount = 0, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { summarizeLifecycleObservability } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:219` |\n| `summarizeProcessSamples` | function: function summarizeProcessSamples({ samples = [], requestedParallelism = 0, command = \"\", args = [], env = process.env, activeCpuThreshold = 0.1, } = {}) | { samples = [], requestedParallelism = 0, command = \"\", args = [], env = process.env, activeCpuThreshold = 0.1, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { summarizeProcessSamples } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:1254` |\n| `SURFACE_TIMESTAMP_POLICY_CONTRACT` | constant: const SURFACE_TIMESTAMP_POLICY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { SURFACE_TIMESTAMP_POLICY_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/surface-manifest.js:1` |\n| `testKfdAgentHub` | function: function testKfdAgentHub({ cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, outputDir = KFD_AGENT_HUB_OUTPUT_DIR, kfdRoot = \"\", run = defaultRun } = {}) | { cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, outputDir = KFD_AGENT_HUB_OUTPUT_DIR, kfdRoot = \"\", run = defaultRun } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { testKfdAgentHub } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-agent-hub.js:399` |\n| `transitionReleaseTransaction` | function: function transitionReleaseTransaction(record, nextState, metadata = {}) | record, nextState, metadata = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { transitionReleaseTransaction } from \"@kungfu-tech/buildchain\";` | `packages/core/publish-transaction.js:256` |\n| `truncateUtf8` | function: function truncateUtf8(text, maxBytes = DEFAULT_MAX_BODY_BYTES) | text, maxBytes = DEFAULT_MAX_BODY_BYTES | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { truncateUtf8 } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:84` |\n| `updateBadgeBundleBlock` | function: function updateBadgeBundleBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { updateBadgeBundleBlock } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:887` |\n| `updateConfiguredVersionStateContents` | function: function updateConfiguredVersionStateContents(files, version) | files, version | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { updateConfiguredVersionStateContents } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:1680` |\n| `updateHomebrewTap` | function: async function updateHomebrewTap({ cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", write = true, } = {}) | { cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", write = true, } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { updateHomebrewTap } from \"@kungfu-tech/buildchain\";` | `packages/core/homebrew.js:390` |\n| `updateReadmeBadgeBlock` | function: function updateReadmeBadgeBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { updateReadmeBadgeBlock } from \"@kungfu-tech/buildchain\";` | `packages/core/readme-badges.js:874` |\n| `validateAnchoredPackageRelease` | function: function validateAnchoredPackageRelease({ cwd = process.cwd(), requireManifest = true, requirePackageSetOrder = \"platforms-first-main-last\", requireTrustedPublishing = true, requireLifecycleStages = [\"install\", \"build\", \"verify\", \"publish\"], requirePublishGateSourceLock = false, publishSource = undefined, env = process.env, } = {}) | { cwd = process.cwd(), requireManifest = true, requirePackageSetOrder = \"platforms-first-main-last\", requireTrustedPublishing = true, requireLifecycleStages = [\"install\", \"build\", \"verify\", \"publish\"], requirePublishGateSourceLock = false, publishSource = undefined, env = process.env, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateAnchoredPackageRelease } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:325` |\n| `validateArtifactSigningReceipt` | function: function validateArtifactSigningReceipt(receipt, { request } = {}) | receipt, { request } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateArtifactSigningReceipt } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing.js:374` |\n| `validateArtifactSigningRequest` | function: function validateArtifactSigningRequest(request) | request | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateArtifactSigningRequest } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing.js:291` |\n| `validateArtifactSigningResult` | function: function validateArtifactSigningResult(result, { request, receipt } = {}) | result, { request, receipt } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateArtifactSigningResult } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing-result.js:147` |\n| `validateBuildchainConfig` | function: function validateBuildchainConfig(cwd = process.cwd(), { requireConfig = true, requireVersionState = false, requireLifecycleStages = [], } = {}) | cwd = process.cwd(), { requireConfig = true, requireVersionState = false, requireLifecycleStages = [], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateBuildchainConfig } from \"@kungfu-tech/buildchain\";` | `packages/core/buildchain-config.js:1547` |\n| `validateControllerPlan` | function: function validateControllerPlan(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateControllerPlan } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:324` |\n| `validateControllerReceipt` | function: function validateControllerReceipt(receipt, { plan = undefined, expectedSourceSha = \"\", expectedRuntimeSha = \"\", expectedPlanDigest = \"\", } = {}) | receipt, { plan = undefined, expectedSourceSha = \"\", expectedRuntimeSha = \"\", expectedPlanDigest = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateControllerReceipt } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:422` |\n| `validateControllerReceiptReference` | function: function validateControllerReceiptReference(reference, { expectedSourceSha = \"\", acceptedSourceShas = [], expectedRuntimeSha = \"\", requirePassed = false, } = {}) | reference, { expectedSourceSha = \"\", acceptedSourceShas = [], expectedRuntimeSha = \"\", requirePassed = false, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateControllerReceiptReference } from \"@kungfu-tech/buildchain\";` | `packages/core/controller-evidence.js:504` |\n| `validateKfd1ReleaseGateEvidence` | function: function validateKfd1ReleaseGateEvidence(section, { metadata = resolveKfd1Metadata() } = {}) | section, { metadata = resolveKfd1Metadata() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfd1ReleaseGateEvidence } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:1337` |\n| `validateKfd2ProductClaimsRegistry` | function: function validateKfd2ProductClaimsRegistry(registry = {}) | registry = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateKfd2ProductClaimsRegistry } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd2-product-claims.js:152` |\n| `validateKfd3CollaborationInterfaceReleaseGateEvidence` | function: function validateKfd3CollaborationInterfaceReleaseGateEvidence(section, { metadata = resolveKfd3Metadata() } = {}) | section, { metadata = resolveKfd3Metadata() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfd3CollaborationInterfaceReleaseGateEvidence } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-gate.js:1470` |\n| `validateKfdProductGateResult` | function: function validateKfdProductGateResult(result, { expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {}) | result, { expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfdProductGateResult } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:565` |\n| `validateKfdSupportProjection` | function: function validateKfdSupportProjection(projection, { expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {}) | projection, { expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfdSupportProjection } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:796` |\n| `validateKnownReleasePassportContracts` | function: function validateKnownReleasePassportContracts() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKnownReleasePassportContracts } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:2853` |\n| `validatePackageManagerContract` | function: function validatePackageManagerContract({ cwd = process.cwd(), expectedManager = \"\" } = {}) | { cwd = process.cwd(), expectedManager = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validatePackageManagerContract } from \"@kungfu-tech/buildchain\";` | `packages/core/package-manager.js:18` |\n| `validatePublishEvidence` | function: function validatePublishEvidence({ evidence, version, channel, sourceSha, releaseSha, targetRef = \"\", releaseMaterialSha = releaseSha, publishToolingSha = \"\", requiredArtifacts = [], } = {}) | { evidence, version, channel, sourceSha, releaseSha, targetRef = \"\", releaseMaterialSha = releaseSha, publishToolingSha = \"\", requiredArtifacts = [], } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validatePublishEvidence } from \"@kungfu-tech/buildchain\";` | `packages/core/publish-transaction.js:674` |\n| `validateReleaseActivationReceiptSet` | function: function validateReleaseActivationReceiptSet(receiptSet, { allowShadow = true } = {}) | receiptSet, { allowShadow = true } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateReleaseActivationReceiptSet } from \"@kungfu-tech/buildchain\";` | `packages/core/release-activation-transaction.js:376` |\n| `validateReleaseActivationTransaction` | function: function validateReleaseActivationTransaction(transaction) | transaction | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateReleaseActivationTransaction } from \"@kungfu-tech/buildchain\";` | `packages/core/release-activation-transaction.js:146` |\n| `validateReleaseCandidatePassport` | function: function validateReleaseCandidatePassport({ passport, repository = \"\", targetChannel = \"\", version = \"\", sourceHeadSha = \"\", buildSummary = undefined, requirePlatforms = true, requireFamilyEvidence = false, familyEvidenceRoot = \"\", familyInitiativeId = \"\", familyAssignmentId = \"\", } = {}) | { passport, repository = \"\", targetChannel = \"\", version = \"\", sourceHeadSha = \"\", buildSummary = undefined, requirePlatforms = true, requireFamilyEvidence = false, familyEvidenceRoot = \"\", familyInitiativeId = \"\", familyAssignmentId = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateReleaseCandidatePassport } from \"@kungfu-tech/buildchain\";` | `packages/core/release-candidate.js:404` |\n| `validateReleasePassportSchema` | function: function validateReleasePassportSchema(passport) | passport | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateReleasePassportSchema } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport-contract.js:256` |\n| `verifyArtifactPassport` | function: async function verifyArtifactPassport({ subject, cwd = process.cwd(), passportLocation = \"\", locatorConfig = \"\", repository = \"\", tag = \"\", githubReleaseBaseUrl = \"\", subjectDigest = \"\", subjectKind = \"\", npmRegistryBaseUrl = \"\", verificationEnvelope = undefined, } = {}) | { subject, cwd = process.cwd(), passportLocation = \"\", locatorConfig = \"\", repository = \"\", tag = \"\", githubReleaseBaseUrl = \"\", subjectDigest = \"\", subjectKind = \"\", npmRegistryBaseUrl = \"\", verificationEnvelope = undefined, } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyArtifactPassport } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-passport.js:701` |\n| `verifyArtifactSigningResultFiles` | function: function verifyArtifactSigningResultFiles({ root, request, receipt, result, } = {}) | { root, request, receipt, result, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyArtifactSigningResultFiles } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-signing-result.js:193` |\n| `verifyArtifactVerificationEnvelope` | function: function verifyArtifactVerificationEnvelope({ envelope, assessmentTime = Math.floor(Date.now() / 1000), expectedEnvelopeRoot = \"\", expectedIssuer = \"\", expectedPublisher = \"\", expectedContractVersion = \"\", } = {}) | { envelope, assessmentTime = Math.floor(Date.now() / 1000), expectedEnvelopeRoot = \"\", expectedIssuer = \"\", expectedPublisher = \"\", expectedContractVersion = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyArtifactVerificationEnvelope } from \"@kungfu-tech/buildchain\";` | `packages/core/artifact-verification-envelope.js:144` |\n| `verifyBuildchainLogEvents` | function: function verifyBuildchainLogEvents({ path: filePath = \"\", events: inputEvents = undefined, minEvents = 1, allowErrors = false, requirePhases = [], requireComponents = [], requireEvents = [], } = {}) | { path: filePath = \"\", events: inputEvents = undefined, minEvents = 1, allowErrors = false, requirePhases = [], requireComponents = [], requireEvents = [], } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyBuildchainLogEvents } from \"@kungfu-tech/buildchain\";` | `packages/core/logging.js:230` |\n| `verifyBuildFacts` | function: function verifyBuildFacts({ cwd = process.cwd(), fact, factPath = \"\" } = {}) | { cwd = process.cwd(), fact, factPath = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyBuildFacts } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:423` |\n| `verifyCacheEvidenceSet` | function: function verifyCacheEvidenceSet(receipt) | receipt | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyCacheEvidenceSet } from \"@kungfu-tech/buildchain\";` | `packages/core/cache-evidence.js:273` |\n| `verifyCacheOperationReceipt` | function: function verifyCacheOperationReceipt(receipt) | receipt | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyCacheOperationReceipt } from \"@kungfu-tech/buildchain\";` | `packages/core/cache-evidence.js:226` |\n| `verifyDetachedArtifactSignature` | function: function verifyDetachedArtifactSignature({ request, envelope, publicKey, } = {}) | { request, envelope, publicKey, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyDetachedArtifactSignature } from \"@kungfu-tech/buildchain\";` | `packages/core/detached-artifact-signature.js:82` |\n| `verifyGitHubArtifactAttestationEvidence` | function: function verifyGitHubArtifactAttestationEvidence({ artifactPath, platformManifestPath, releasePassportPath, bundlePath, evidence, verificationResults, } = {}) | { artifactPath, platformManifestPath, releasePassportPath, bundlePath, evidence, verificationResults, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyGitHubArtifactAttestationEvidence } from \"@kungfu-tech/buildchain\";` | `packages/core/github-artifact-attestation.js:563` |\n| `verifyGithubGovernanceReceipt` | function: function verifyGithubGovernanceReceipt(receipt, { expectedOrganization, expectedRepository, expectedRepositoryIdentityRoot, expectedTargetRef, expectedPolicyRoot, expectedVerifierSourceRevision, now = new Date().toISOString(), } = {}) | receipt, { expectedOrganization, expectedRepository, expectedRepositoryIdentityRoot, expectedTargetRef, expectedPolicyRoot, expectedVerifierSourceRevision, now = new Date().toISOString(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyGithubGovernanceReceipt } from \"@kungfu-tech/buildchain\";` | `packages/core/github-governance-authority.js:884` |\n| `verifyKfdRecord` | function: async function verifyKfdRecord(record) | record | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyKfdRecord } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd-product-gates.js:308` |\n| `verifyPortableDevCachePlan` | function: function verifyPortableDevCachePlan(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyPortableDevCachePlan } from \"@kungfu-tech/buildchain\";` | `packages/core/portable-dev-cache.js:211` |\n| `verifyPublicationAdmission` | function: function verifyPublicationAdmission({ admission, registry, runnerProvenance, controlPlaneAudit, publicationEvidence, expected = {}, usedNonces = [], now = new Date(), } = {}) | { admission, registry, runnerProvenance, controlPlaneAudit, publicationEvidence, expected = {}, usedNonces = [], now = new Date(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyPublicationAdmission } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:791` |\n| `verifyPublicationQualificationReceipt` | function: function verifyPublicationQualificationReceipt({ receipt, capability, gateAggregate, expected = {}, usedNonces = [], now = new Date(), } = {}) | { receipt, capability, gateAggregate, expected = {}, usedNonces = [], now = new Date(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyPublicationQualificationReceipt } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-authority.js:1096` |\n| `verifyPublicationReproducibility` | function: function verifyPublicationReproducibility({ cwd = process.cwd(), sourceSha = \"\", output = DEFAULT_OUTPUT, promote = false, keepWorkspaces = false, pullToolchain = true, packageName = \"\", allowUnpinnedToolchain = false, overlayPaths = [DEFAULT_REGISTRY_INPUT_DIR, DEFAULT_REGISTRY_HYDRATION], } = {}) | { cwd = process.cwd(), sourceSha = \"\", output = DEFAULT_OUTPUT, promote = false, keepWorkspaces = false, pullToolchain = true, packageName = \"\", allowUnpinnedToolchain = false, overlayPaths = [DEFAULT_REGISTRY_INPUT_DIR, DEFAULT_REGISTRY_HYDRATION], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { verifyPublicationReproducibility } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-reproducibility.js:869` |\n| `verifyPublicationSealedBundle` | function: function verifyPublicationSealedBundle({ bundleRoot, manifest } = {}) | { bundleRoot, manifest } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyPublicationSealedBundle } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-sealed-bundle.js:124` |\n| `verifyReleasePassport` | function: async function verifyReleasePassport({ passportLocation, artifactEvidenceLocation = \"\", publishEvidenceLocation = \"\", impactLocation = \"\", agentIndexLocation = \"\", productMechanismLocation = \"\", kfdAgentHubEvidenceLocation = \"\", kfdSupportEvidenceLocation = \"\", checkedAt = nowIso(), } = {}) | { passportLocation, artifactEvidenceLocation = \"\", publishEvidenceLocation = \"\", impactLocation = \"\", agentIndexLocation = \"\", productMechanismLocation = \"\", kfdAgentHubEvidenceLocation = \"\", kfdSupportEvidenceLocation = \"\", checkedAt = nowIso(), } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyReleasePassport } from \"@kungfu-tech/buildchain\";` | `packages/core/release-passport.js:2743` |\n| `verifyReleasePropagationWork` | function: function verifyReleasePropagationWork(input) | input | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyReleasePropagationWork } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation-work.js:486` |\n| `WEB_SURFACE_PRODUCTION_DECISION_CONTRACT` | constant: const WEB_SURFACE_PRODUCTION_DECISION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { WEB_SURFACE_PRODUCTION_DECISION_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/web-surface-publication-candidate.js:7` |\n| `WEB_SURFACE_PUBLICATION_CANDIDATE_CONTRACT` | constant: const WEB_SURFACE_PUBLICATION_CANDIDATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { WEB_SURFACE_PUBLICATION_CANDIDATE_CONTRACT } from \"@kungfu-tech/buildchain\";` | `packages/core/web-surface-publication-candidate.js:5` |\n| `webSurfacePublicationDigest` | function: function webSurfacePublicationDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { webSurfacePublicationDigest } from \"@kungfu-tech/buildchain\";` | `packages/core/web-surface-publication-candidate.js:21` |\n| `workflowFrictionMarker` | function: function workflowFrictionMarker(fingerprint) | fingerprint | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { workflowFrictionMarker } from \"@kungfu-tech/buildchain\";` | `packages/core/issue-reporting.js:80` |\n| `writeBuildFacts` | function: function writeBuildFacts({ cwd = process.cwd(), fact, output = \"\" } = {}) | { cwd = process.cwd(), fact, output = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { writeBuildFacts } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:549` |\n| `writeDiagnosticsArtifact` | function: function writeDiagnosticsArtifact(filePath, diagnostics) | filePath, diagnostics | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { writeDiagnosticsArtifact } from \"@kungfu-tech/buildchain\";` | `packages/core/diagnostics.js:1459` |\n| `writeKfd2ProductClaimOutputs` | function: function writeKfd2ProductClaimOutputs(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { writeKfd2ProductClaimOutputs } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd2-product-claims.js:426` |\n| `writeKfd3SurfaceRegistry` | function: function writeKfd3SurfaceRegistry({ cwd = process.cwd(), registryPath = \"\", registry }) | { cwd = process.cwd(), registryPath = \"\", registry } | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { writeKfd3SurfaceRegistry } from \"@kungfu-tech/buildchain\";` | `packages/core/kfd3-surface-register.js:478` |\n| `writeKungfuBuildInfoProjection` | function: function writeKungfuBuildInfoProjection({ cwd = process.cwd(), moduleFact, output } = {}) | { cwd = process.cwd(), moduleFact, output } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { writeKungfuBuildInfoProjection } from \"@kungfu-tech/buildchain\";` | `packages/core/build-facts.js:557` |\n| `writePaperFleetUpdate` | function: function writePaperFleetUpdate(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { writePaperFleetUpdate } from \"@kungfu-tech/buildchain\";` | `packages/core/paper-fleet.js:271` |\n| `writePaperMigration` | function: function writePaperMigration(plan) | plan | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { writePaperMigration } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:1129` |\n| `writePaperScaffold` | function: function writePaperScaffold(plan) | plan | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { writePaperScaffold } from \"@kungfu-tech/buildchain\";` | `packages/core/paper.js:847` |\n| `writePublicationArtifact` | function: function writePublicationArtifact({ cwd = process.cwd(), output = \"\", passportOutput = \"\", registryOutput = \"\", registryInputs = [], sourceSha = \"\", sourceBundle = true, sourceBundlePath = \"\", generatedAt = \"\", } = {}) | { cwd = process.cwd(), output = \"\", passportOutput = \"\", registryOutput = \"\", registryInputs = [], sourceSha = \"\", sourceBundle = true, sourceBundlePath = \"\", generatedAt = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { writePublicationArtifact } from \"@kungfu-tech/buildchain\";` | `packages/core/publication-artifact.js:598` |\n| `writeReleaseLineBootstrapVersionState` | function: function writeReleaseLineBootstrapVersionState({ cwd = process.cwd(), major, minor, sourceRef = \"\", initialVersion = \"\", runVersionStateLifecycle = true, generatedAt = \"\", } = {}) | { cwd = process.cwd(), major, minor, sourceRef = \"\", initialVersion = \"\", runVersionStateLifecycle = true, generatedAt = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { writeReleaseLineBootstrapVersionState } from \"@kungfu-tech/buildchain\";` | `packages/core/release-line-bootstrap.js:237` |\n| `writeReleasePropagationLock` | function: function writeReleasePropagationLock({ plan, target = \"\", cwd = process.cwd(), output = \"\" } = {}) | { plan, target = \"\", cwd = process.cwd(), output = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { writeReleasePropagationLock } from \"@kungfu-tech/buildchain\";` | `packages/core/release-propagation.js:317` |\n| `writeReleaseTransaction` | function: function writeReleaseTransaction(filePath, record) | filePath, record | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { writeReleaseTransaction } from \"@kungfu-tech/buildchain\";` | `packages/core/publish-transaction.js:376` |\n\n## `@kungfu-tech/buildchain/badges`\n\nTarget: `./packages/core/badges.js`. Public symbols: 17.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `BADGE_BUNDLE_DEFAULT_CLAIMS` | constant: const BADGE_BUNDLE_DEFAULT_CLAIMS | none | value | Import does not declare a throw contract. | none-on-import | `import { BADGE_BUNDLE_DEFAULT_CLAIMS } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:17` |\n| `BADGE_BUNDLE_FACTS_CONTRACT` | constant: const BADGE_BUNDLE_FACTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BADGE_BUNDLE_FACTS_CONTRACT } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:13` |\n| `checkBadgeBundleBlock` | function: function checkBadgeBundleBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkBadgeBundleBlock } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:867` |\n| `checkReadmeBadgeBlock` | function: function checkReadmeBadgeBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkReadmeBadgeBlock } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:848` |\n| `collectBadgeBundleFacts` | function: async function collectBadgeBundleFacts({ cwd = process.cwd(), claims = undefined } = {}) | { cwd = process.cwd(), claims = undefined } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectBadgeBundleFacts } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:790` |\n| `collectReadmeBadgeFacts` | function: async function collectReadmeBadgeFacts({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectReadmeBadgeFacts } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:700` |\n| `createKfdBadgeSpecsFromStandards` | function: function createKfdBadgeSpecsFromStandards(standardsMetadata) | standardsMetadata | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfdBadgeSpecsFromStandards } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:126` |\n| `createReadmeBadgeEndpointRegistry` | function: function createReadmeBadgeEndpointRegistry({ kfdSpecs = undefined, kfdStandards = undefined } = {}) | { kfdSpecs = undefined, kfdStandards = undefined } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { createReadmeBadgeEndpointRegistry } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:133` |\n| `README_BADGE_BLOCK_END` | constant: const README_BADGE_BLOCK_END | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_BLOCK_END } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:15` |\n| `README_BADGE_BLOCK_START` | constant: const README_BADGE_BLOCK_START | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_BLOCK_START } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:14` |\n| `README_BADGE_FACTS_CONTRACT` | constant: const README_BADGE_FACTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_FACTS_CONTRACT } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:12` |\n| `README_BADGE_HOSTED_BASE_URL` | constant: const README_BADGE_HOSTED_BASE_URL | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_HOSTED_BASE_URL } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:16` |\n| `readReadme` | function: function readReadme({ cwd = process.cwd(), readmePath = \"README.md\" } = {}) | { cwd = process.cwd(), readmePath = \"README.md\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readReadme } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:891` |\n| `renderBadgeBundleBlock` | function: function renderBadgeBundleBlock(facts) | facts | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { renderBadgeBundleBlock } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:840` |\n| `renderReadmeBadgeBlock` | function: function renderReadmeBadgeBlock(facts) | facts | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { renderReadmeBadgeBlock } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:836` |\n| `updateBadgeBundleBlock` | function: function updateBadgeBundleBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { updateBadgeBundleBlock } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:887` |\n| `updateReadmeBadgeBlock` | function: function updateReadmeBadgeBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { updateReadmeBadgeBlock } from \"@kungfu-tech/buildchain/badges\";` | `packages/core/readme-badges.js:874` |\n\n## `@kungfu-tech/buildchain/build-facts`\n\nTarget: `./packages/core/build-facts.js`. Public symbols: 15.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `aggregateBuildFacts` | function: function aggregateBuildFacts({ cwd = process.cwd(), productId = \"\", moduleFacts = [], artifacts = [], now = nowIso(), } = {}) | { cwd = process.cwd(), productId = \"\", moduleFacts = [], artifacts = [], now = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | subprocess | `import { aggregateBuildFacts } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:458` |\n| `BUILD_FACTS_GIT_CONTRACT` | constant: const BUILD_FACTS_GIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_GIT_CONTRACT } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:9` |\n| `BUILD_FACTS_LEGACY_KUNGFU_BUILDINFO_CONTRACT` | constant: const BUILD_FACTS_LEGACY_KUNGFU_BUILDINFO_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_LEGACY_KUNGFU_BUILDINFO_CONTRACT } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:14` |\n| `BUILD_FACTS_MODULE_CONTRACT` | constant: const BUILD_FACTS_MODULE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_MODULE_CONTRACT } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:11` |\n| `BUILD_FACTS_PRODUCT_CONTRACT` | constant: const BUILD_FACTS_PRODUCT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_PRODUCT_CONTRACT } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:12` |\n| `BUILD_FACTS_VERIFY_CONTRACT` | constant: const BUILD_FACTS_VERIFY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_VERIFY_CONTRACT } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:13` |\n| `BUILD_FACTS_VERSION_CONTRACT` | constant: const BUILD_FACTS_VERSION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_VERSION_CONTRACT } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:10` |\n| `buildFactsDigest` | function: function buildFactsDigest(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write, subprocess | `import { buildFactsDigest } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:45` |\n| `collectGitSourceFacts` | function: function collectGitSourceFacts({ cwd = process.cwd(), root = \".\" } = {}) | { cwd = process.cwd(), root = \".\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectGitSourceFacts } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:146` |\n| `collectModuleBuildFacts` | function: function collectModuleBuildFacts({ cwd = process.cwd(), moduleId = \"\", moduleRoot = \"\", scope = \"\", versionSource = undefined, versionSourceId = \"\", outputs = [], lifecycle = \"\", platform = currentPlatform(), dependencies = [], now = nowIso(), } = {}) | { cwd = process.cwd(), moduleId = \"\", moduleRoot = \"\", scope = \"\", versionSource = undefined, versionSourceId = \"\", outputs = [], lifecycle = \"\", platform = currentPlatform(), dependencies = [], now = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectModuleBuildFacts } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:302` |\n| `collectVersionSourceFact` | function: function collectVersionSourceFact({ cwd = process.cwd(), source = undefined, sourceId = \"\", now = nowIso() } = {}) | { cwd = process.cwd(), source = undefined, sourceId = \"\", now = nowIso() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { collectVersionSourceFact } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:173` |\n| `createKungfuBuildInfoProjection` | function: function createKungfuBuildInfoProjection({ moduleFact, cwd = process.cwd(), now = nowIso() } = {}) | { moduleFact, cwd = process.cwd(), now = nowIso() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKungfuBuildInfoProjection } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:520` |\n| `verifyBuildFacts` | function: function verifyBuildFacts({ cwd = process.cwd(), fact, factPath = \"\" } = {}) | { cwd = process.cwd(), fact, factPath = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyBuildFacts } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:423` |\n| `writeBuildFacts` | function: function writeBuildFacts({ cwd = process.cwd(), fact, output = \"\" } = {}) | { cwd = process.cwd(), fact, output = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { writeBuildFacts } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:549` |\n| `writeKungfuBuildInfoProjection` | function: function writeKungfuBuildInfoProjection({ cwd = process.cwd(), moduleFact, output } = {}) | { cwd = process.cwd(), moduleFact, output } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { writeKungfuBuildInfoProjection } from \"@kungfu-tech/buildchain/build-facts\";` | `packages/core/build-facts.js:557` |\n\n## `@kungfu-tech/buildchain/core`\n\nTarget: `./packages/core/index.js`. Public symbols: 558.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `abortReleaseActivationTransaction` | function: function abortReleaseActivationTransaction(transaction, reason) | transaction, reason | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { abortReleaseActivationTransaction } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-activation-transaction.js:277` |\n| `AGENT_INDEX_CONTRACT` | constant: const AGENT_INDEX_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { AGENT_INDEX_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:31` |\n| `aggregateBuildFacts` | function: function aggregateBuildFacts({ cwd = process.cwd(), productId = \"\", moduleFacts = [], artifacts = [], now = nowIso(), } = {}) | { cwd = process.cwd(), productId = \"\", moduleFacts = [], artifacts = [], now = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | subprocess | `import { aggregateBuildFacts } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:458` |\n| `aggregateControllerReceipts` | function: function aggregateControllerReceipts({ plans = [], receipts = [] } = {}) | { plans = [], receipts = [] } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { aggregateControllerReceipts } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:448` |\n| `ANCHORED_VERSION_MATERIAL_CONTRACT` | constant: const ANCHORED_VERSION_MATERIAL_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ANCHORED_VERSION_MATERIAL_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/anchored-version-material.js:15` |\n| `appendBuildchainLogEvent` | function: function appendBuildchainLogEvent(filePath, event) | filePath, event | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { appendBuildchainLogEvent } from \"@kungfu-tech/buildchain/core\";` | `packages/core/logging.js:67` |\n| `applySurfaceTimestampPolicy` | function: function applySurfaceTimestampPolicy(manifest, options = {}) | manifest, options = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { applySurfaceTimestampPolicy } from \"@kungfu-tech/buildchain/core\";` | `packages/core/surface-manifest.js:79` |\n| `ARTIFACT_EVIDENCE_CONTRACT` | constant: const ARTIFACT_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_EVIDENCE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:29` |\n| `ARTIFACT_PASSPORT_LOCATOR_CONTRACT` | constant: const ARTIFACT_PASSPORT_LOCATOR_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_PASSPORT_LOCATOR_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-passport.js:11` |\n| `ARTIFACT_PASSPORT_POINTER_CONTRACT` | constant: const ARTIFACT_PASSPORT_POINTER_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_PASSPORT_POINTER_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-passport.js:10` |\n| `ARTIFACT_SIGNING_AUTHORITY_CONTRACT` | constant: const ARTIFACT_SIGNING_AUTHORITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_SIGNING_AUTHORITY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing.js:7` |\n| `ARTIFACT_SIGNING_RECEIPT_CONTRACT` | constant: const ARTIFACT_SIGNING_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_SIGNING_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing.js:5` |\n| `ARTIFACT_SIGNING_REQUEST_CONTRACT` | constant: const ARTIFACT_SIGNING_REQUEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_SIGNING_REQUEST_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing.js:3` |\n| `ARTIFACT_SIGNING_RESULT_CONTRACT` | constant: const ARTIFACT_SIGNING_RESULT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_SIGNING_RESULT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing-result.js:12` |\n| `ARTIFACT_VERIFICATION_CONTRACT` | constant: const ARTIFACT_VERIFICATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_VERIFICATION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-passport.js:9` |\n| `ARTIFACT_VERIFICATION_ENVELOPE_CHECK_CONTRACT` | constant: const ARTIFACT_VERIFICATION_ENVELOPE_CHECK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_VERIFICATION_ENVELOPE_CHECK_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-verification-envelope.js:5` |\n| `ARTIFACT_VERIFICATION_ENVELOPE_CONTRACT` | constant: const ARTIFACT_VERIFICATION_ENVELOPE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_VERIFICATION_ENVELOPE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-verification-envelope.js:3` |\n| `artifactSigningDigest` | function: function artifactSigningDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { artifactSigningDigest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing.js:60` |\n| `artifactSigningEvidenceDigest` | function: function artifactSigningEvidenceDigest(evidence = []) | evidence = [] | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { artifactSigningEvidenceDigest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing-result.js:58` |\n| `artifactVerificationEnvelopeDigest` | function: function artifactVerificationEnvelopeDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { artifactVerificationEnvelopeDigest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-verification-envelope.js:50` |\n| `assertPackageManager` | function: function assertPackageManager(manager) | manager | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { assertPackageManager } from \"@kungfu-tech/buildchain/core\";` | `packages/core/package-manager.js:49` |\n| `assertPublicSurfaceReverseAudit` | function: function assertPublicSurfaceReverseAudit(report) | report | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { assertPublicSurfaceReverseAudit } from \"@kungfu-tech/buildchain/core\";` | `packages/core/public-surface-audit.js:261` |\n| `auditKfd3Surfaces` | function: function auditKfd3Surfaces({ cwd = process.cwd(), registryPath = \"\", kinds = [], artifactPath = \"\", } = {}) | { cwd = process.cwd(), registryPath = \"\", kinds = [], artifactPath = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { auditKfd3Surfaces } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd3-surface-register.js:547` |\n| `BADGE_BUNDLE_DEFAULT_CLAIMS` | constant: const BADGE_BUNDLE_DEFAULT_CLAIMS | none | value | Import does not declare a throw contract. | none-on-import | `import { BADGE_BUNDLE_DEFAULT_CLAIMS } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:17` |\n| `BADGE_BUNDLE_FACTS_CONTRACT` | constant: const BADGE_BUNDLE_FACTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BADGE_BUNDLE_FACTS_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:13` |\n| `BUILD_FACTS_GIT_CONTRACT` | constant: const BUILD_FACTS_GIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_GIT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:9` |\n| `BUILD_FACTS_LEGACY_KUNGFU_BUILDINFO_CONTRACT` | constant: const BUILD_FACTS_LEGACY_KUNGFU_BUILDINFO_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_LEGACY_KUNGFU_BUILDINFO_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:14` |\n| `BUILD_FACTS_MODULE_CONTRACT` | constant: const BUILD_FACTS_MODULE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_MODULE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:11` |\n| `BUILD_FACTS_PRODUCT_CONTRACT` | constant: const BUILD_FACTS_PRODUCT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_PRODUCT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:12` |\n| `BUILD_FACTS_VERIFY_CONTRACT` | constant: const BUILD_FACTS_VERIFY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_VERIFY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:13` |\n| `BUILD_FACTS_VERSION_CONTRACT` | constant: const BUILD_FACTS_VERSION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILD_FACTS_VERSION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:10` |\n| `BUILDCHAIN_AGENT_MANUALS` | constant: const BUILDCHAIN_AGENT_MANUALS | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_AGENT_MANUALS } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-agent-manuals.js:1` |\n| `BUILDCHAIN_ANCHORED_PACKAGE_RELEASE_VALIDATION_CONTRACT` | constant: const BUILDCHAIN_ANCHORED_PACKAGE_RELEASE_VALIDATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_ANCHORED_PACKAGE_RELEASE_VALIDATION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:31` |\n| `BUILDCHAIN_CACHE_EVIDENCE_SET_CONTRACT` | constant: const BUILDCHAIN_CACHE_EVIDENCE_SET_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CACHE_EVIDENCE_SET_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/cache-evidence.js:5` |\n| `BUILDCHAIN_CACHE_OPERATION_RECEIPT_CONTRACT` | constant: const BUILDCHAIN_CACHE_OPERATION_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CACHE_OPERATION_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/cache-evidence.js:3` |\n| `BUILDCHAIN_CANDIDATE_TIMELINE_CONTRACT` | constant: const BUILDCHAIN_CANDIDATE_TIMELINE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CANDIDATE_TIMELINE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/candidate-timeline.js:1` |\n| `BUILDCHAIN_CANDIDATE_TIMELINE_EVENT_CONTRACT` | constant: const BUILDCHAIN_CANDIDATE_TIMELINE_EVENT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CANDIDATE_TIMELINE_EVENT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/candidate-timeline.js:3` |\n| `BUILDCHAIN_CONFIG_PATH` | constant: const BUILDCHAIN_CONFIG_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONFIG_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:7` |\n| `BUILDCHAIN_CONSUMER_ISSUE_CONTRACT` | constant: const BUILDCHAIN_CONSUMER_ISSUE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONSUMER_ISSUE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:4` |\n| `BUILDCHAIN_CONTRACT_LOCK` | constant: const BUILDCHAIN_CONTRACT_LOCK | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTRACT_LOCK } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-contract.js:8` |\n| `BUILDCHAIN_CONTRACT_LOCK_PATH` | constant: const BUILDCHAIN_CONTRACT_LOCK_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTRACT_LOCK_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:9` |\n| `BUILDCHAIN_CONTROLLER_AGGREGATE_CONTRACT` | constant: const BUILDCHAIN_CONTROLLER_AGGREGATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTROLLER_AGGREGATE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:6` |\n| `BUILDCHAIN_CONTROLLER_DESCRIPTOR_CONTRACT` | constant: const BUILDCHAIN_CONTROLLER_DESCRIPTOR_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTROLLER_DESCRIPTOR_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:4` |\n| `BUILDCHAIN_CONTROLLER_EVIDENCE_CONTRACT` | constant: const BUILDCHAIN_CONTROLLER_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTROLLER_EVIDENCE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:3` |\n| `BUILDCHAIN_CONTROLLER_REGISTRY_CONTRACT` | constant: const BUILDCHAIN_CONTROLLER_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTROLLER_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:5` |\n| `BUILDCHAIN_DIAGNOSTICS_CONTRACT` | constant: const BUILDCHAIN_DIAGNOSTICS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_DIAGNOSTICS_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:28` |\n| `BUILDCHAIN_DIAGNOSTICS_MANIFEST_CONTRACT` | constant: const BUILDCHAIN_DIAGNOSTICS_MANIFEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_DIAGNOSTICS_MANIFEST_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:33` |\n| `BUILDCHAIN_DIAGNOSTICS_SUMMARY_CONTRACT` | constant: const BUILDCHAIN_DIAGNOSTICS_SUMMARY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_DIAGNOSTICS_SUMMARY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:35` |\n| `BUILDCHAIN_DIR` | constant: const BUILDCHAIN_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_DIR } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:4` |\n| `BUILDCHAIN_GENERATED_DIRS` | constant: const BUILDCHAIN_GENERATED_DIRS | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_GENERATED_DIRS } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:36` |\n| `BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY` | constant: const BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:1363` |\n| `BUILDCHAIN_GITHUB_GOVERNANCE_PROTECTED_PATHS` | constant: const BUILDCHAIN_GITHUB_GOVERNANCE_PROTECTED_PATHS | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_GITHUB_GOVERNANCE_PROTECTED_PATHS } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:1365` |\n| `BUILDCHAIN_JSON_FORMATTING_POLICY` | constant: const BUILDCHAIN_JSON_FORMATTING_POLICY | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_JSON_FORMATTING_POLICY } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:14` |\n| `BUILDCHAIN_KFD_CLAIM_REGISTRY_CONTRACT` | constant: const BUILDCHAIN_KFD_CLAIM_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD_CLAIM_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-kfd-claims.js:14` |\n| `BUILDCHAIN_KFD_COLLABORATION_INTERFACE_CONTRACT` | constant: const BUILDCHAIN_KFD_COLLABORATION_INTERFACE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD_COLLABORATION_INTERFACE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-kfd-claims.js:15` |\n| `BUILDCHAIN_KFD_ROOT` | constant: const BUILDCHAIN_KFD_ROOT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD_ROOT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:11` |\n| `BUILDCHAIN_KFD1_CONTRACT_WORLD_WITNESS_PATH` | constant: const BUILDCHAIN_KFD1_CONTRACT_WORLD_WITNESS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD1_CONTRACT_WORLD_WITNESS_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:16` |\n| `BUILDCHAIN_KFD1_DIR` | constant: const BUILDCHAIN_KFD1_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD1_DIR } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:12` |\n| `BUILDCHAIN_KFD1_RELEASE_GATE_PATH` | constant: const BUILDCHAIN_KFD1_RELEASE_GATE_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD1_RELEASE_GATE_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:17` |\n| `BUILDCHAIN_KFD1_VERIFY_RESULT_PATH` | constant: const BUILDCHAIN_KFD1_VERIFY_RESULT_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD1_VERIFY_RESULT_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:18` |\n| `BUILDCHAIN_KFD2_CLAIM_ARGS_PATH` | constant: const BUILDCHAIN_KFD2_CLAIM_ARGS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_CLAIM_ARGS_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:21` |\n| `BUILDCHAIN_KFD2_CLAIMS_DIR` | constant: const BUILDCHAIN_KFD2_CLAIMS_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_CLAIMS_DIR } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:22` |\n| `BUILDCHAIN_KFD2_DIR` | constant: const BUILDCHAIN_KFD2_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_DIR } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:13` |\n| `BUILDCHAIN_KFD2_REGISTRY_PATH` | constant: const BUILDCHAIN_KFD2_REGISTRY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_REGISTRY_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:19` |\n| `BUILDCHAIN_KFD2_RELEASE_CLAIMS_PATH` | constant: const BUILDCHAIN_KFD2_RELEASE_CLAIMS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_RELEASE_CLAIMS_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:20` |\n| `BUILDCHAIN_KFD3_ARTIFACT_WITNESS_PATH` | constant: const BUILDCHAIN_KFD3_ARTIFACT_WITNESS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_ARTIFACT_WITNESS_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:26` |\n| `BUILDCHAIN_KFD3_CAPABILITY_QUERY_PATH` | constant: const BUILDCHAIN_KFD3_CAPABILITY_QUERY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_CAPABILITY_QUERY_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:27` |\n| `BUILDCHAIN_KFD3_COLLABORATION_INTERFACE_PATH` | constant: const BUILDCHAIN_KFD3_COLLABORATION_INTERFACE_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_COLLABORATION_INTERFACE_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:24` |\n| `BUILDCHAIN_KFD3_DIR` | constant: const BUILDCHAIN_KFD3_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_DIR } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:14` |\n| `BUILDCHAIN_KFD3_PREBUILD_WITNESS_PATH` | constant: const BUILDCHAIN_KFD3_PREBUILD_WITNESS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_PREBUILD_WITNESS_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:25` |\n| `BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH` | constant: const BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:23` |\n| `BUILDCHAIN_KFD4_DIR` | constant: const BUILDCHAIN_KFD4_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD4_DIR } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:15` |\n| `BUILDCHAIN_LAYOUT_DISCOVERY_CONTRACT` | constant: const BUILDCHAIN_LAYOUT_DISCOVERY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LAYOUT_DISCOVERY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:6` |\n| `BUILDCHAIN_LIFECYCLE_OBSERVABILITY_CONTRACT` | constant: const BUILDCHAIN_LIFECYCLE_OBSERVABILITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LIFECYCLE_OBSERVABILITY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:29` |\n| `BUILDCHAIN_LOCKED_SOURCE_CHECKOUT_CONTRACT` | constant: const BUILDCHAIN_LOCKED_SOURCE_CHECKOUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LOCKED_SOURCE_CHECKOUT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:41` |\n| `BUILDCHAIN_LOG_EVENT_CONTRACT` | constant: const BUILDCHAIN_LOG_EVENT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LOG_EVENT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/logging.js:6` |\n| `BUILDCHAIN_LOG_SUMMARY_CONTRACT` | constant: const BUILDCHAIN_LOG_SUMMARY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LOG_SUMMARY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/logging.js:7` |\n| `BUILDCHAIN_PROCESS_SAMPLE_REPORT_CONTRACT` | constant: const BUILDCHAIN_PROCESS_SAMPLE_REPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_PROCESS_SAMPLE_REPORT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:37` |\n| `BUILDCHAIN_PROCESS_SAMPLE_SUMMARY_CONTRACT` | constant: const BUILDCHAIN_PROCESS_SAMPLE_SUMMARY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_PROCESS_SAMPLE_SUMMARY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:39` |\n| `BUILDCHAIN_PUBLIC_SURFACE_AUDIT_CONTRACT` | constant: const BUILDCHAIN_PUBLIC_SURFACE_AUDIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_PUBLIC_SURFACE_AUDIT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/public-surface-audit.js:12` |\n| `BUILDCHAIN_RELEASE_PASSPORT_PATH` | constant: const BUILDCHAIN_RELEASE_PASSPORT_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_RELEASE_PASSPORT_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:33` |\n| `BUILDCHAIN_RUNTIME_CONTRACT_WORLD` | constant: const BUILDCHAIN_RUNTIME_CONTRACT_WORLD | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_RUNTIME_CONTRACT_WORLD } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-contract.js:7` |\n| `BUILDCHAIN_VERSION_PIN_PATH` | constant: const BUILDCHAIN_VERSION_PIN_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_VERSION_PIN_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:5` |\n| `BUILDCHAIN_WORKFLOW_FRICTION_ISSUE_CONTRACT` | constant: const BUILDCHAIN_WORKFLOW_FRICTION_ISSUE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_WORKFLOW_FRICTION_ISSUE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:5` |\n| `buildchainKfdClaims` | constant: const buildchainKfdClaims | none | value | Import does not declare a throw contract. | none-on-import | `import { buildchainKfdClaims } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd.js:896` |\n| `buildchainPublicationAuthorityDescriptors` | function: function buildchainPublicationAuthorityDescriptors() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { buildchainPublicationAuthorityDescriptors } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-publication-authority.js:54` |\n| `buildConsumerIssueReport` | function: function buildConsumerIssueReport(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { buildConsumerIssueReport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:104` |\n| `buildFactsDigest` | function: function buildFactsDigest(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write, subprocess | `import { buildFactsDigest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:45` |\n| `buildWorkflowFrictionIssueReport` | function: function buildWorkflowFrictionIssueReport(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { buildWorkflowFrictionIssueReport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:199` |\n| `cacheEvidenceDigest` | function: function cacheEvidenceDigest(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { cacheEvidenceDigest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/cache-evidence.js:48` |\n| `CHANNEL_CANDIDATE_DECISION_SCHEMA` | constant: const CHANNEL_CANDIDATE_DECISION_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { CHANNEL_CANDIDATE_DECISION_SCHEMA } from \"@kungfu-tech/buildchain/core\";` | `packages/core/channel-candidate.js:5` |\n| `channelCandidateSourceLockRef` | function: function channelCandidateSourceLockRef(targetBranch, sourceSha) | targetBranch, sourceSha | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { channelCandidateSourceLockRef } from \"@kungfu-tech/buildchain/core\";` | `packages/core/channel-candidate.js:84` |\n| `checkBadgeBundleBlock` | function: function checkBadgeBundleBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkBadgeBundleBlock } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:867` |\n| `checkHomebrewTap` | function: async function checkHomebrewTap({ cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", } = {}) | { cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkHomebrewTap } from \"@kungfu-tech/buildchain/core\";` | `packages/core/homebrew.js:335` |\n| `checkKfd2ProductClaimOutputs` | function: function checkKfd2ProductClaimOutputs(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkKfd2ProductClaimOutputs } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd2-product-claims.js:415` |\n| `checkReadmeBadgeBlock` | function: function checkReadmeBadgeBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkReadmeBadgeBlock } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:848` |\n| `claimReleasePropagationWork` | function: function claimReleasePropagationWork({ work, expectedWorkRoot, authority, familyState, } = {}) | { work, expectedWorkRoot, authority, familyState, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { claimReleasePropagationWork } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-work-transitions.js:17` |\n| `classifyProcessCommand` | function: function classifyProcessCommand(command = \"\") | command = \"\" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { classifyProcessCommand } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:1085` |\n| `classifyReleasePropagationCondition` | function: function classifyReleasePropagationCondition(condition) | condition | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { classifyReleasePropagationCondition } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-agent-entry.js:171` |\n| `codeownersForPath` | function: function codeownersForPath(source, candidatePath) | source, candidatePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { codeownersForPath } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:417` |\n| `collectBadgeBundleFacts` | function: async function collectBadgeBundleFacts({ cwd = process.cwd(), claims = undefined } = {}) | { cwd = process.cwd(), claims = undefined } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectBadgeBundleFacts } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:790` |\n| `collectBuildchainDiagnostics` | function: function collectBuildchainDiagnostics({ cwd = process.cwd(), artifactPaths = [] } = {}) | { cwd = process.cwd(), artifactPaths = [] } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectBuildchainDiagnostics } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:248` |\n| `collectCacheDiagnostics` | function: function collectCacheDiagnostics({ cwd = process.cwd(), cacheDirs = [], runCommand = defaultDiagnosticCommandRunner } = {}) | { cwd = process.cwd(), cacheDirs = [], runCommand = defaultDiagnosticCommandRunner } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectCacheDiagnostics } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:922` |\n| `collectCompilerCacheDiagnostics` | function: function collectCompilerCacheDiagnostics({ cwd = process.cwd(), runCommand = defaultDiagnosticCommandRunner, env = process.env, } = {}) | { cwd = process.cwd(), runCommand = defaultDiagnosticCommandRunner, env = process.env, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectCompilerCacheDiagnostics } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:573` |\n| `collectGitDiagnostics` | function: function collectGitDiagnostics({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectGitDiagnostics } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:944` |\n| `collectGitHubReleasePassport` | function: function collectGitHubReleasePassport({ cwd = process.cwd(), tag = \"\", repository = process.env.GITHUB_REPOSITORY \\|\\| \"\", sourceSha = process.env.GITHUB_SHA \\|\\| \"\", line = \"\", outputDir = \".buildchain/release-passport\", assetsJson = \"\", assetsDir = \"\", releaseJson = \"\", productName = \"Buildchain\", packageName = \"@kungfu-tech/buildchain\", packageVersion = \"\", packageSetJson = \"\", publishEvidenceJson = \"\", trustedPublishingJson = \"\", transactionJson = \"\", anchorManifestJson = \"\", versionMaterialJson = \"\", impactJson = \"\", buildSummaryJson = \"\", buildFactsJsons = [], platformManifestJsons = [], distTagEvidenceJson = \"\", kfd1WitnessJsons = [], kfd2ClaimJsons = [], kfd3PrebuildWitnessJsons = [], kfd3ArtifactWitnessJsons = [], kfd3ArtifactVerifyCommand = \"\", kfdSupportMatrixJson = \"\", kfdProductGateJsons = [], invariantPassportJsons = [], invariantPassportCommand = \"\", releaseEvidenceJsons = [], kfdAgentHubEvidenceJson = \"\", controllerReceiptReferences = [], githubArtifactAttestationPolicyJsons = [], basePassportJson = \"\", requireBaseKfd = false, releaseJsonExtra = \"\", publishJson = \"\", workflow = {}, checkedAt = \"\", } = {}) | { cwd = process.cwd(), tag = \"\", repository = process.env.GITHUB_REPOSITORY \\|\\| \"\", sourceSha = process.env.GITHUB_SHA \\|\\| \"\", line = \"\", outputDir = \".buildchain/release-passport\", assetsJson = \"\", assetsDir = \"\", releaseJson = \"\", productName = \"Buildchain\", packageName = \"@kungfu-tech/buildchain\", packageVersion = \"\", packageSetJson = \"\", publishEvidenceJson = \"\", trustedPublishingJson = \"\", transactionJson = \"\", anchorManifestJson = \"\", versionMaterialJson = \"\", impactJson = \"\", buildSummaryJson = \"\", buildFactsJsons = [], platformManifestJsons = [], distTagEvidenceJson = \"\", kfd1WitnessJsons = [], kfd2ClaimJsons = [], kfd3PrebuildWitnessJsons = [], kfd3ArtifactWitnessJsons = [], kfd3ArtifactVerifyCommand = \"\", kfdSupportMatrixJson = \"\", kfdProductGateJsons = [], invariantPassportJsons = [], invariantPassportCommand = \"\", releaseEvidenceJsons = [], kfdAgentHubEvidenceJson = \"\", controllerReceiptReferences = [], githubArtifactAttestationPolicyJsons = [], basePassportJson = \"\", requireBaseKfd = false, releaseJsonExtra = \"\", publishJson = \"\", workflow = {}, checkedAt = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { collectGitHubReleasePassport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:1488` |\n| `collectGitSourceFacts` | function: function collectGitSourceFacts({ cwd = process.cwd(), root = \".\" } = {}) | { cwd = process.cwd(), root = \".\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectGitSourceFacts } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:146` |\n| `collectHomebrewTapFacts` | function: async function collectHomebrewTapFacts({ cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", } = {}) | { cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectHomebrewTapFacts } from \"@kungfu-tech/buildchain/core\";` | `packages/core/homebrew.js:223` |\n| `collectKfdStatus` | function: function collectKfdStatus({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectKfdStatus } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd.js:902` |\n| `collectModuleBuildFacts` | function: function collectModuleBuildFacts({ cwd = process.cwd(), moduleId = \"\", moduleRoot = \"\", scope = \"\", versionSource = undefined, versionSourceId = \"\", outputs = [], lifecycle = \"\", platform = currentPlatform(), dependencies = [], now = nowIso(), } = {}) | { cwd = process.cwd(), moduleId = \"\", moduleRoot = \"\", scope = \"\", versionSource = undefined, versionSourceId = \"\", outputs = [], lifecycle = \"\", platform = currentPlatform(), dependencies = [], now = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectModuleBuildFacts } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:302` |\n| `collectNativeDiagnostics` | function: function collectNativeDiagnostics({ cwd = process.cwd(), profile = undefined, runCommand = defaultDiagnosticCommandRunner, } = {}) | { cwd = process.cwd(), profile = undefined, runCommand = defaultDiagnosticCommandRunner, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectNativeDiagnostics } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:295` |\n| `collectPaperFleetAudit` | function: function collectPaperFleetAudit({ root = process.cwd(), repositories = [], buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainSha = \"\", governance = {}, } = {}) | { root = process.cwd(), repositories = [], buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainSha = \"\", governance = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectPaperFleetAudit } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-fleet.js:158` |\n| `collectPaperPreflight` | function: function collectPaperPreflight({ cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainRef = \"v3\", buildchainSha = \"\", registry = NPM_REGISTRY, offline = false, agentEntryMode = \"contract\", } = {}) | { cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainRef = \"v3\", buildchainSha = \"\", registry = NPM_REGISTRY, offline = false, agentEntryMode = \"contract\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectPaperPreflight } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:2413` |\n| `collectPaperStatus` | function: function collectPaperStatus({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectPaperStatus } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:1471` |\n| `collectProcessTreeSnapshot` | function: function collectProcessTreeSnapshot({ rootPid = process.pid, cwd = process.cwd(), platform = process.platform, runCommand = defaultDiagnosticCommandRunner, } = {}) | { rootPid = process.pid, cwd = process.cwd(), platform = process.platform, runCommand = defaultDiagnosticCommandRunner, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectProcessTreeSnapshot } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:1029` |\n| `collectPublicationArtifact` | function: function collectPublicationArtifact({ cwd = process.cwd(), sourceSha = \"\", sourceBundle = true, sourceBundlePath = \"\", generatedAt = \"\", manifestPath = \"\", passportPath = \"\", } = {}) | { cwd = process.cwd(), sourceSha = \"\", sourceBundle = true, sourceBundlePath = \"\", generatedAt = \"\", manifestPath = \"\", passportPath = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { collectPublicationArtifact } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-artifact.js:271` |\n| `collectPublicationPackageFacts` | function: function collectPublicationPackageFacts({ cwd = process.cwd(), packageName = \"\", outputDir = \".buildchain/publication/npm-package\", } = {}) | { cwd = process.cwd(), packageName = \"\", outputDir = \".buildchain/publication/npm-package\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { collectPublicationPackageFacts } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-package.js:74` |\n| `collectPublicSurfaceReverseAudit` | function: function collectPublicSurfaceReverseAudit({ root = process.cwd(), cliRegistry: suppliedCliRegistry = undefined, workflowRegistry: suppliedWorkflowRegistry = undefined, pageRegistry: suppliedPageRegistry = undefined, } = {}) | { root = process.cwd(), cliRegistry: suppliedCliRegistry = undefined, workflowRegistry: suppliedWorkflowRegistry = undefined, pageRegistry: suppliedPageRegistry = undefined, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectPublicSurfaceReverseAudit } from \"@kungfu-tech/buildchain/core\";` | `packages/core/public-surface-audit.js:161` |\n| `collectReadmeBadgeFacts` | function: async function collectReadmeBadgeFacts({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectReadmeBadgeFacts } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:700` |\n| `collectRunnerDiagnostics` | function: function collectRunnerDiagnostics() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectRunnerDiagnostics } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:468` |\n| `collectToolDiagnostics` | function: function collectToolDiagnostics({ cwd = process.cwd(), tools = [\"node\", \"pnpm\", \"npm\", \"git\", \"cmake\", \"ninja\", \"ccache\", \"sccache\"] } = {}) | { cwd = process.cwd(), tools = [\"node\", \"pnpm\", \"npm\", \"git\", \"cmake\", \"ninja\", \"ccache\", \"sccache\"] } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectToolDiagnostics } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:495` |\n| `collectVersionSourceFact` | function: function collectVersionSourceFact({ cwd = process.cwd(), source = undefined, sourceId = \"\", now = nowIso() } = {}) | { cwd = process.cwd(), source = undefined, sourceId = \"\", now = nowIso() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { collectVersionSourceFact } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:173` |\n| `commandForKungfuUpgrade` | function: function commandForKungfuUpgrade(manager, scope = \"@kungfu-trader\") | manager, scope = \"@kungfu-trader\" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { commandForKungfuUpgrade } from \"@kungfu-tech/buildchain/core\";` | `packages/core/package-manager.js:121` |\n| `commandForRunScript` | function: function commandForRunScript(manager, script) | manager, script | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { commandForRunScript } from \"@kungfu-tech/buildchain/core\";` | `packages/core/package-manager.js:89` |\n| `commandForVersion` | function: function commandForVersion(manager, keyword, options = {}) | manager, keyword, options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { commandForVersion } from \"@kungfu-tech/buildchain/core\";` | `packages/core/package-manager.js:100` |\n| `compileEffectiveGithubGovernancePolicy` | function: function compileEffectiveGithubGovernancePolicy({ branch, defaultBranch, protectedBranch = false, protection, rulesets = [], } = {}) | { branch, defaultBranch, protectedBranch = false, protection, rulesets = [], } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { compileEffectiveGithubGovernancePolicy } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:311` |\n| `completeReleasePropagationWork` | function: function completeReleasePropagationWork({ work, expectedWorkRoot, receipt, completionDecision, } = {}) | { work, expectedWorkRoot, receipt, completionDecision, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { completeReleasePropagationWork } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-work-transitions.js:110` |\n| `computeConsumerIssueFingerprint` | function: function computeConsumerIssueFingerprint(fields = {}) | fields = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { computeConsumerIssueFingerprint } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:64` |\n| `CONSUMER_PUBLICATION_DECISION_CONTRACT` | constant: const CONSUMER_PUBLICATION_DECISION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { CONSUMER_PUBLICATION_DECISION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:20` |\n| `consumerIssueMarker` | function: function consumerIssueMarker(fingerprint) | fingerprint | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { consumerIssueMarker } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:76` |\n| `contractSummary` | function: function contractSummary(contractWorld, runtimeRef = \"\", runtimeSha = \"\") | contractWorld, runtimeRef = \"\", runtimeSha = \"\" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { contractSummary } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-contract.js:945` |\n| `controllerEvidenceDigest` | function: function controllerEvidenceDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { controllerEvidenceDigest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:150` |\n| `createAnchoredVersionMaterialEvidence` | function: function createAnchoredVersionMaterialEvidence({ cwd = process.cwd(), targetChannel = \"\", targetRef = \"\", alphaRef = \"\", releaseRef = \"HEAD\", runLifecycle = true, } = {}) | { cwd = process.cwd(), targetChannel = \"\", targetRef = \"\", alphaRef = \"\", releaseRef = \"HEAD\", runLifecycle = true, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createAnchoredVersionMaterialEvidence } from \"@kungfu-tech/buildchain/core\";` | `packages/core/anchored-version-material.js:118` |\n| `createArtifactEvidence` | function: function createArtifactEvidence({ assets = [], repository = \"\", tag = \"\", sourceSha = \"\", workflow = {} } = {}) | { assets = [], repository = \"\", tag = \"\", sourceSha = \"\", workflow = {} } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createArtifactEvidence } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:1158` |\n| `createArtifactSigningReceipt` | function: function createArtifactSigningReceipt({ request, status = \"passed\", authority = {}, result = {}, signatures = [], reason = \"\", } = {}) | { request, status = \"passed\", authority = {}, result = {}, signatures = [], reason = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createArtifactSigningReceipt } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing.js:313` |\n| `createArtifactSigningRequest` | function: function createArtifactSigningRequest({ source = {}, runtime = {}, artifact = {}, signature = {}, delivery = {}, } = {}) | { source = {}, runtime = {}, artifact = {}, signature = {}, delivery = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createArtifactSigningRequest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing.js:167` |\n| `createArtifactSigningResult` | function: function createArtifactSigningResult({ request, receipt, receiptPath = \"receipt.json\", payload = {}, evidence = [], verification = {}, } = {}) | { request, receipt, receiptPath = \"receipt.json\", payload = {}, evidence = [], verification = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createArtifactSigningResult } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing-result.js:68` |\n| `createBuildchainContractLock` | function: function createBuildchainContractLock({ buildchainRef = \"v3\", resolvedSha = \"\", contractWorld, compatibilityPolicy = DEFAULT_POLICY, acceptedAt = new Date().toISOString(), } = {}) | { buildchainRef = \"v3\", resolvedSha = \"\", contractWorld, compatibilityPolicy = DEFAULT_POLICY, acceptedAt = new Date().toISOString(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createBuildchainContractLock } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-contract.js:787` |\n| `createBuildchainContractWorld` | function: function createBuildchainContractWorld({ root = process.cwd(), packageJson = undefined, controllerRegistry = undefined, } = {}) | { root = process.cwd(), packageJson = undefined, controllerRegistry = undefined, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainContractWorld } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-contract.js:110` |\n| `createBuildchainGithubGovernanceAuthority` | function: function createBuildchainGithubGovernanceAuthority() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainGithubGovernanceAuthority } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:450` |\n| `createBuildchainKfd1Witness` | function: function createBuildchainKfd1Witness({ root = process.cwd(), sourceSha = \"\" } = {}) | { root = process.cwd(), sourceSha = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfd1Witness } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-kfd-claims.js:530` |\n| `createBuildchainKfd2Claims` | function: function createBuildchainKfd2Claims({ root = process.cwd(), witnessFiles = {} } = {}) | { root = process.cwd(), witnessFiles = {} } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfd2Claims } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-kfd-claims.js:687` |\n| `createBuildchainKfd3ArtifactWitness` | function: function createBuildchainKfd3ArtifactWitness({ root = process.cwd(), sourceSha = \"\" } = {}) | { root = process.cwd(), sourceSha = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfd3ArtifactWitness } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-kfd-claims.js:647` |\n| `createBuildchainKfd3PrebuildWitness` | function: function createBuildchainKfd3PrebuildWitness({ root = process.cwd(), sourceSha = \"\" } = {}) | { root = process.cwd(), sourceSha = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfd3PrebuildWitness } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-kfd-claims.js:583` |\n| `createBuildchainKfdClaimRegistry` | function: function createBuildchainKfdClaimRegistry({ root = process.cwd(), sourceSha = \"\" } = {}) | { root = process.cwd(), sourceSha = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfdClaimRegistry } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-kfd-claims.js:510` |\n| `createBuildchainKfdSurfaceRegistry` | function: function createBuildchainKfdSurfaceRegistry({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfdSurfaceRegistry } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-kfd-claims.js:411` |\n| `createBuildchainLayoutDiscovery` | function: function createBuildchainLayoutDiscovery({ cwd = process.cwd(), buildchainVersion = \"\", } = {}) | { cwd = process.cwd(), buildchainVersion = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainLayoutDiscovery } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:99` |\n| `createBuildchainLogger` | function: function createBuildchainLogger(options = {}) | options = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { createBuildchainLogger } from \"@kungfu-tech/buildchain/core\";` | `packages/core/logging.js:300` |\n| `createBuildchainPublicationAuthorityRegistry` | function: function createBuildchainPublicationAuthorityRegistry({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainPublicationAuthorityRegistry } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-publication-authority.js:79` |\n| `createBuildchainPublicClaimDefinitions` | function: function createBuildchainPublicClaimDefinitions() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainPublicClaimDefinitions } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-kfd-claims.js:226` |\n| `createCacheEvidenceSet` | function: function createCacheEvidenceSet({ repository, sourceCommit, sourceTree = \"\", runtimeCommit = \"\", platform, operations = [], } = {}) | { repository, sourceCommit, sourceTree = \"\", runtimeCommit = \"\", platform, operations = [], } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createCacheEvidenceSet } from \"@kungfu-tech/buildchain/core\";` | `packages/core/cache-evidence.js:244` |\n| `createCacheOperationReceipt` | function: function createCacheOperationReceipt({ operationId, operation, provider, producer, platform, cacheKey, cacheRoot, outcome, bindings = {}, metrics, evidence, } = {}) | { operationId, operation, provider, producer, platform, cacheKey, cacheRoot, outcome, bindings = {}, metrics, evidence, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createCacheOperationReceipt } from \"@kungfu-tech/buildchain/core\";` | `packages/core/cache-evidence.js:169` |\n| `createCandidateTimeline` | function: function createCandidateTimeline({ candidate = {}, events = [], generatedAt, } = {}) | { candidate = {}, events = [], generatedAt, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createCandidateTimeline } from \"@kungfu-tech/buildchain/core\";` | `packages/core/candidate-timeline.js:381` |\n| `createConsumerPublicationDecision` | function: function createConsumerPublicationDecision({ capability, gateAggregate, decision, predicateId, predicateDigest, evidence = {}, now = new Date(), } = {}) | { capability, gateAggregate, decision, predicateId, predicateDigest, evidence = {}, now = new Date(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createConsumerPublicationDecision } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:991` |\n| `createControllerPlan` | function: function createControllerPlan({ descriptor, source = {}, runtime = {}, inputs = {} } = {}) | { descriptor, source = {}, runtime = {}, inputs = {} } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createControllerPlan } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:286` |\n| `createControllerReceipt` | function: function createControllerReceipt({ plan, stages = [], evidence = [], reason = undefined, artifact = \"\" } = {}) | { plan, stages = [], evidence = [], reason = undefined, artifact = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createControllerReceipt } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:362` |\n| `createControllerReceiptReference` | function: function createControllerReceiptReference(receipt) | receipt | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createControllerReceiptReference } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:490` |\n| `createControllerRegistry` | function: function createControllerRegistry({ workflows = [] } = {}) | { workflows = [] } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createControllerRegistry } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:196` |\n| `createDiagnosticsArtifact` | function: function createDiagnosticsArtifact({ cwd = process.cwd(), logPath = \"\", artifactPaths = [], cacheDirs = [], lifecycleObservability = undefined, processSamples = [], processSummary = undefined, requestedParallelism = 0, sourceCheckout = undefined, compilerCachePreparation = undefined, links = {}, } = {}) | { cwd = process.cwd(), logPath = \"\", artifactPaths = [], cacheDirs = [], lifecycleObservability = undefined, processSamples = [], processSummary = undefined, requestedParallelism = 0, sourceCheckout = undefined, compilerCachePreparation = undefined, links = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createDiagnosticsArtifact } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:1408` |\n| `createGitHubArtifactAttestationEvidence` | function: function createGitHubArtifactAttestationEvidence({ preparation, attestationId, attestationUrl, bundlePath, workflow = {}, } = {}) | { preparation, attestationId, attestationUrl, bundlePath, workflow = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createGitHubArtifactAttestationEvidence } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:474` |\n| `createGitHubArtifactAttestationPolicy` | function: function createGitHubArtifactAttestationPolicy(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGitHubArtifactAttestationPolicy } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:204` |\n| `createGitHubArtifactAttestationVerificationPlan` | function: function createGitHubArtifactAttestationVerificationPlan({ artifactPath, bundlePath, evidence, } = {}) | { artifactPath, bundlePath, evidence, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGitHubArtifactAttestationVerificationPlan } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:524` |\n| `createGithubGovernanceRolloutPlan` | function: function createGithubGovernanceRolloutPlan({ repository, targetRef, inventory, rollbackSnapshot, rollbackProtectionExists = true, desiredProtection, } = {}) | { repository, targetRef, inventory, rollbackSnapshot, rollbackProtectionExists = true, desiredProtection, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGithubGovernanceRolloutPlan } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:932` |\n| `createGitHubIssueRequest` | function: function createGitHubIssueRequest({ token, apiUrl = process.env.GITHUB_API_URL \\|\\| \"https://api.github.com\", fetchImpl = globalThis.fetch, retryDelaysMs = DEFAULT_RETRY_DELAYS_MS, } = {}) | { token, apiUrl = process.env.GITHUB_API_URL \\|\\| \"https://api.github.com\", fetchImpl = globalThis.fetch, retryDelaysMs = DEFAULT_RETRY_DELAYS_MS, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGitHubIssueRequest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:393` |\n| `createGithubRulesetBypassRolloutPlan` | function: function createGithubRulesetBypassRolloutPlan({ repository, rulesetId, inventory, rollbackSnapshot, } = {}) | { repository, rulesetId, inventory, rollbackSnapshot, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGithubRulesetBypassRolloutPlan } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:1110` |\n| `createGithubRulesetGovernanceRolloutPlan` | function: function createGithubRulesetGovernanceRolloutPlan({ repository, targetRef, rulesetId, rulesetName, inventory, rollbackSnapshot, desiredProtection, } = {}) | { repository, targetRef, rulesetId, rulesetName, inventory, rollbackSnapshot, desiredProtection, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGithubRulesetGovernanceRolloutPlan } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:1189` |\n| `createKfd1ReleaseGateEvidence` | function: function createKfd1ReleaseGateEvidence({ cwd = process.cwd(), artifactRoot = \"\", artifacts = [], witnesses = [], verifiedAt = new Date().toISOString(), metadata = resolveKfd1Metadata(), } = {}) | { cwd = process.cwd(), artifactRoot = \"\", artifacts = [], witnesses = [], verifiedAt = new Date().toISOString(), metadata = resolveKfd1Metadata(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfd1ReleaseGateEvidence } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:977` |\n| `createKfd3CollaborationInterfaceReleaseGateEvidence` | function: function createKfd3CollaborationInterfaceReleaseGateEvidence({ prebuildWitnesses = [], artifactWitnesses = [], prebuildWitnessMetas = [], artifactWitnessMetas = [], artifactCommandMeta = undefined, verifiedAt = new Date().toISOString(), metadata = resolveKfd3Metadata(), } = {}) | { prebuildWitnesses = [], artifactWitnesses = [], prebuildWitnessMetas = [], artifactWitnessMetas = [], artifactCommandMeta = undefined, verifiedAt = new Date().toISOString(), metadata = resolveKfd3Metadata(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfd3CollaborationInterfaceReleaseGateEvidence } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:1132` |\n| `createKfd3SurfaceWitness` | function: function createKfd3SurfaceWitness({ cwd = process.cwd(), registryPath = \"\", kind = \"prebuild\", sourceSha = \"\", artifactPath = \"\", } = {}) | { cwd = process.cwd(), registryPath = \"\", kind = \"prebuild\", sourceSha = \"\", artifactPath = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | network | `import { createKfd3SurfaceWitness } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd3-surface-register.js:702` |\n| `createKfdBadgeSpecsFromStandards` | function: function createKfdBadgeSpecsFromStandards(standardsMetadata) | standardsMetadata | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfdBadgeSpecsFromStandards } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:126` |\n| `createKfdSupportProjection` | function: function createKfdSupportProjection({ matrix, matrixRoot = \"\", gateResults = [], authorityPath = \".buildchain/kfd/support-matrix.json\", expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {}) | { matrix, matrixRoot = \"\", gateResults = [], authorityPath = \".buildchain/kfd/support-matrix.json\", expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfdSupportProjection } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:716` |\n| `createKungfuBuildInfoProjection` | function: function createKungfuBuildInfoProjection({ moduleFact, cwd = process.cwd(), now = nowIso() } = {}) | { moduleFact, cwd = process.cwd(), now = nowIso() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKungfuBuildInfoProjection } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:520` |\n| `createManualUpstreamPickupCapture` | function: function createManualUpstreamPickupCapture({ plan, expectedDownstreamBaseSha, }) | { plan, expectedDownstreamBaseSha, } | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createManualUpstreamPickupCapture } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-pickup.js:361` |\n| `createManualUpstreamPickupPlan` | function: function createManualUpstreamPickupPlan({ config: configInput, sourceId, channel, currentVersion, upstreamRelease, }) | { config: configInput, sourceId, channel, currentVersion, upstreamRelease, } | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createManualUpstreamPickupPlan } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-pickup.js:303` |\n| `createPackageReleasePropagationCapture` | function: function createPackageReleasePropagationCapture({ config: configInput, upstreamRelease: upstreamReleaseInput, expectedBaseShas = {}, } = {}) | { config: configInput, upstreamRelease: upstreamReleaseInput, expectedBaseShas = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPackageReleasePropagationCapture } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-capture.js:101` |\n| `createPaperAlphaPlan` | function: function createPaperAlphaPlan({ cwd = process.cwd(), sourceRef = \"\", targetRef = \"\", } = {}) | { cwd = process.cwd(), sourceRef = \"\", targetRef = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPaperAlphaPlan } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:2655` |\n| `createPaperBuildPlan` | function: function createPaperBuildPlan({ cwd = process.cwd(), sourceSha = \"\", pullToolchain = true, } = {}) | { cwd = process.cwd(), sourceSha = \"\", pullToolchain = true, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPaperBuildPlan } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:2592` |\n| `createPaperResumePlan` | function: function createPaperResumePlan({ cwd = process.cwd(), buildchainRef = \"\", } = {}) | { cwd = process.cwd(), buildchainRef = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { createPaperResumePlan } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:2713` |\n| `createPaperWorkStartPlan` | function: function createPaperWorkStartPlan({ cwd = process.cwd(), topic = \"\", branch = \"\", buildchainSha = \"\", } = {}) | { cwd = process.cwd(), topic = \"\", branch = \"\", buildchainSha = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPaperWorkStartPlan } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-work.js:41` |\n| `createPaperWorkSubmitPlan` | function: function createPaperWorkSubmitPlan({ cwd = process.cwd(), pullRequests = [], pullRequestObservation = { ok: true }, buildchainSha = \"\", } = {}) | { cwd = process.cwd(), pullRequests = [], pullRequestObservation = { ok: true }, buildchainSha = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPaperWorkSubmitPlan } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-work.js:207` |\n| `createPortableDevCachePlan` | function: function createPortableDevCachePlan(manifest) | manifest | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPortableDevCachePlan } from \"@kungfu-tech/buildchain/core\";` | `packages/core/portable-dev-cache.js:172` |\n| `createPortableDevCacheReceipt` | function: function createPortableDevCacheReceipt({ plan, matchedKey = \"\", cacheHit = \"\", validationStatus = \"pass\", validationReason = \"\", coldFallbackStatus = \"not-run\", }) | { plan, matchedKey = \"\", cacheHit = \"\", validationStatus = \"pass\", validationReason = \"\", coldFallbackStatus = \"not-run\", } | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPortableDevCacheReceipt } from \"@kungfu-tech/buildchain/core\";` | `packages/core/portable-dev-cache.js:226` |\n| `createPublicationAdmission` | function: function createPublicationAdmission(input = {}) | input = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPublicationAdmission } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:236` |\n| `createPublicationArtifactCandidate` | function: function createPublicationArtifactCandidate({ repository, sourceSha, sourceTreeSha, runtimeSha, manifest, passport, controllerReceipt, files = [], } = {}) | { repository, sourceSha, sourceTreeSha, runtimeSha, manifest, passport, controllerReceipt, files = [], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationArtifactCandidate } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-artifact-candidate.js:55` |\n| `createPublicationArtifactManifestSet` | function: function createPublicationArtifactManifestSet({ repository, sourceSha, sourceTreeSha, manifests = [], payloads = [], } = {}) | { repository, sourceSha, sourceTreeSha, manifests = [], payloads = [], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationArtifactManifestSet } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:303` |\n| `createPublicationAuthorityRegistry` | function: function createPublicationAuthorityRegistry({ descriptors = [], workflows = [] } = {}) | { descriptors = [], workflows = [] } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationAuthorityRegistry } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:121` |\n| `createPublicationControlPlaneAudit` | function: function createPublicationControlPlaneAudit({ repository, workflowPath, publisherWorkflowPath, environment, facts = [], observedAt, expiresAt, } = {}) | { repository, workflowPath, publisherWorkflowPath, environment, facts = [], observedAt, expiresAt, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPublicationControlPlaneAudit } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:208` |\n| `createPublicationGateDecision` | function: function createPublicationGateDecision({ sourceSha, profile, required = false, rationale, policy = {}, } = {}) | { sourceSha, profile, required = false, rationale, policy = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPublicationGateDecision } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:280` |\n| `createPublicationQualificationReceipt` | function: function createPublicationQualificationReceipt({ capability, gateAggregate, consumerDecision, now = new Date(), } = {}) | { capability, gateAggregate, consumerDecision, now = new Date(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationQualificationReceipt } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:1035` |\n| `createPublicationSealedBundle` | function: function createPublicationSealedBundle({ candidate, packageName, packageVersion, npmTarballPath, npmIntegrity, releaseAssetPaths = [], githubReleaseRequired = true, } = {}) | { candidate, packageName, packageVersion, npmTarballPath, npmIntegrity, releaseAssetPaths = [], githubReleaseRequired = true, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationSealedBundle } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-sealed-bundle.js:75` |\n| `createPublicationSourceBundle` | function: function createPublicationSourceBundle({ cwd = process.cwd(), sourcePaths = [], output = \".buildchain/publication/source.tar.gz\", } = {}) | { cwd = process.cwd(), sourcePaths = [], output = \".buildchain/publication/source.tar.gz\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write, subprocess | `import { createPublicationSourceBundle } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-artifact.js:249` |\n| `createReadmeBadgeEndpointRegistry` | function: function createReadmeBadgeEndpointRegistry({ kfdSpecs = undefined, kfdStandards = undefined } = {}) | { kfdSpecs = undefined, kfdStandards = undefined } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { createReadmeBadgeEndpointRegistry } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:133` |\n| `createReleaseActivationReceiptSet` | function: function createReleaseActivationReceiptSet({ transaction, receipts = [], } = {}) | { transaction, receipts = [], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleaseActivationReceiptSet } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-activation-transaction.js:311` |\n| `createReleaseActivationTransaction` | function: function createReleaseActivationTransaction({ transactionId, mode = \"shadow\", bindings, owners, } = {}) | { transactionId, mode = \"shadow\", bindings, owners, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleaseActivationTransaction } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-activation-transaction.js:103` |\n| `createReleaseCandidatePassport` | function: function createReleaseCandidatePassport({ repository = \"\", pullRequest = {}, targetChannel = \"\", version = \"\", sourceHeadSha = \"\", baseSha = \"\", mergeRefSha = \"\", sourceTreeHash = \"\", buildSummary = {}, buildchain = {}, gateAggregate = undefined, familyEvidence = undefined, controllerReceipts = [], controllerReceiptReferences = [], workflow = {}, createdAt = nowIso(), } = {}) | { repository = \"\", pullRequest = {}, targetChannel = \"\", version = \"\", sourceHeadSha = \"\", baseSha = \"\", mergeRefSha = \"\", sourceTreeHash = \"\", buildSummary = {}, buildchain = {}, gateAggregate = undefined, familyEvidence = undefined, controllerReceipts = [], controllerReceiptReferences = [], workflow = {}, createdAt = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleaseCandidatePassport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-candidate.js:310` |\n| `createReleaseCheckReport` | function: function createReleaseCheckReport({ passport, artifactEvidence, publishEvidence, impact, agentIndex, productMechanism, kfdAgentHubEvidence, kfdSupportEvidence, releaseEvidenceDocuments = [], checkedAt = nowIso(), } = {}) | { passport, artifactEvidence, publishEvidence, impact, agentIndex, productMechanism, kfdAgentHubEvidence, kfdSupportEvidence, releaseEvidenceDocuments = [], checkedAt = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleaseCheckReport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:2628` |\n| `createReleasePassport` | function: function createReleasePassport({ cwd = process.cwd(), repository = \"\", tag = \"\", sourceSha = \"\", line = \"\", productName = \"Buildchain\", packageName = \"@kungfu-tech/buildchain\", packageVersion = \"\", productMechanismPath = \"product-mechanism.json\", artifactEvidencePath = \"artifact-evidence.json\", impactPath = \"impact.json\", agentIndexPath = \"agent-index.json\", checkReportPath = \"check-report.json\", publishEvidencePath = \"\", transactionStatePath = \"\", assets = [], packageSet = undefined, anchorManifest = undefined, versionMaterial = undefined, publishEvidence = undefined, trustedPublishing = undefined, transaction = undefined, buildSummary = undefined, buildFacts = [], platformArtifactManifests = [], distTagPromotionEvidence = undefined, release = {}, publish = {}, impact = undefined, workflow = {}, kfd1 = undefined, kfd2Claims = [], kfd3 = undefined, kfdSupport = undefined, kfdSupportEvidencePath = \"\", invariantPassports = undefined, releaseEvidence = [], kfdAgentHubEvidence = undefined, kfdAgentHubEvidencePath = \"\", controllerReceipts = [], controllerReceiptReferences = [], githubArtifactAttestations = [], checkedAt = \"\", } = {}) | { cwd = process.cwd(), repository = \"\", tag = \"\", sourceSha = \"\", line = \"\", productName = \"Buildchain\", packageName = \"@kungfu-tech/buildchain\", packageVersion = \"\", productMechanismPath = \"product-mechanism.json\", artifactEvidencePath = \"artifact-evidence.json\", impactPath = \"impact.json\", agentIndexPath = \"agent-index.json\", checkReportPath = \"check-report.json\", publishEvidencePath = \"\", transactionStatePath = \"\", assets = [], packageSet = undefined, anchorManifest = undefined, versionMaterial = undefined, publishEvidence = undefined, trustedPublishing = undefined, transaction = undefined, buildSummary = undefined, buildFacts = [], platformArtifactManifests = [], distTagPromotionEvidence = undefined, release = {}, publish = {}, impact = undefined, workflow = {}, kfd1 = undefined, kfd2Claims = [], kfd3 = undefined, kfdSupport = undefined, kfdSupportEvidencePath = \"\", invariantPassports = undefined, releaseEvidence = [], kfdAgentHubEvidence = undefined, kfdAgentHubEvidencePath = \"\", controllerReceipts = [], controllerReceiptReferences = [], githubArtifactAttestations = [], checkedAt = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleasePassport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:1214` |\n| `createReleasePassportCheckManifest` | function: function createReleasePassportCheckManifest({ standards = kfdStandards } = {}) | { standards = kfdStandards } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleasePassportCheckManifest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport-contract.js:147` |\n| `createReleasePropagationLock` | function: function createReleasePropagationLock({ graph, edge, sourceNode, targetNode, upstreamRelease, downstreamChannel, } = {}) | { graph, edge, sourceNode, targetNode, upstreamRelease, downstreamChannel, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleasePropagationLock } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation.js:199` |\n| `createReleasePropagationPushPlan` | function: function createReleasePropagationPushPlan({ work: workInput, expectedWorkRoot, repositoryState: stateInput, } = {}) | { work: workInput, expectedWorkRoot, repositoryState: stateInput, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { createReleasePropagationPushPlan } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-push.js:77` |\n| `createReleasePropagationReceipt` | function: function createReleasePropagationReceipt({ plan, target = \"\", lockResult, prOutcome, stagingState = \"pending\", productionState = \"not-requested\", observedAt = \"\", } = {}) | { plan, target = \"\", lockResult, prOutcome, stagingState = \"pending\", productionState = \"not-requested\", observedAt = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleasePropagationReceipt } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation.js:371` |\n| `createReleasePropagationStageReceipt` | function: function createReleasePropagationStageReceipt({ work, stage, outcome = \"success\", observedAt, actor, summary, evidence, failure = null, } = {}) | { work, stage, outcome = \"success\", observedAt, actor, summary, evidence, failure = null, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleasePropagationStageReceipt } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-work.js:214` |\n| `createReleasePropagationWork` | function: function createReleasePropagationWork({ plan, target = \"\", workContext, expectedDownstreamBaseSha, } = {}) | { plan, target = \"\", workContext, expectedDownstreamBaseSha, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleasePropagationWork } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-work.js:111` |\n| `createReleaseTransaction` | function: function createReleaseTransaction({ repository, version, exactTag = \"\", channel, line = \"\", sourceSha, targetRef, releaseSha, releaseMaterialSha = releaseSha, publishToolingSha = \"\", lifecycleIdentity = \"lifecycle.publish\", statePath = \"\", evidencePath = \"\", actor = \"\", runId = \"\", } = {}) | { repository, version, exactTag = \"\", channel, line = \"\", sourceSha, targetRef, releaseSha, releaseMaterialSha = releaseSha, publishToolingSha = \"\", lifecycleIdentity = \"lifecycle.publish\", statePath = \"\", evidencePath = \"\", actor = \"\", runId = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleaseTransaction } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publish-transaction.js:197` |\n| `createRunnerProvenance` | function: function createRunnerProvenance({ runnerClass, os, architecture, imageDigest, measurementDigest, baselineDigest = \"\", toolchainDigest = \"\", cacheContractDigest = \"\", taskIsolationDigest = \"\", cleanBaselineProven = false, isolation = \"\", } = {}) | { runnerClass, os, architecture, imageDigest, measurementDigest, baselineDigest = \"\", toolchainDigest = \"\", cacheContractDigest = \"\", taskIsolationDigest = \"\", cleanBaselineProven = false, isolation = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createRunnerProvenance } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:166` |\n| `createStableCandidateLedger` | function: function createStableCandidateLedger({ repository, targetBranch, now = new Date().toISOString() } = {}) | { repository, targetBranch, now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createStableCandidateLedger } from \"@kungfu-tech/buildchain/core\";` | `packages/core/stable-candidate-ledger.js:56` |\n| `createSurfaceTimestampPolicy` | function: function createSurfaceTimestampPolicy({ generatedAt = \"\", publishedAt = \"\", sourceDateEpoch = process.env.SOURCE_DATE_EPOCH \\|\\| DEFAULT_SOURCE_DATE_EPOCH, sourceRevision = \"\", deterministicInputs = [], timestampPolicy = \"\", timestampFields = [\"generatedAt\", \"publishedAt\"], timestampFieldsParticipateInArtifactDigest = true, artifactDigestScope = \"manifest-and-artifact\", reproducible = true, } = {}) | { generatedAt = \"\", publishedAt = \"\", sourceDateEpoch = process.env.SOURCE_DATE_EPOCH \\|\\| DEFAULT_SOURCE_DATE_EPOCH, sourceRevision = \"\", deterministicInputs = [], timestampPolicy = \"\", timestampFields = [\"generatedAt\", \"publishedAt\"], timestampFieldsParticipateInArtifactDigest = true, artifactDigestScope = \"manifest-and-artifact\", reproducible = true, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createSurfaceTimestampPolicy } from \"@kungfu-tech/buildchain/core\";` | `packages/core/surface-manifest.js:34` |\n| `createWebSurfaceProductionDecision` | function: function createWebSurfaceProductionDecision({ approved, kind, repository, sourceSha, actor, actorPermission = \"\", releasePr = 0, releaseSource = \"\", reason, } = {}) | { approved, kind, repository, sourceSha, actor, actorPermission = \"\", releasePr = 0, releaseSource = \"\", reason, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createWebSurfaceProductionDecision } from \"@kungfu-tech/buildchain/core\";` | `packages/core/web-surface-publication-candidate.js:45` |\n| `createWebSurfacePublicationCandidate` | function: function createWebSurfacePublicationCandidate({ repository, sourceSha, sourceTreeSha, runtimeSha, plan, planFileDigest, controllerReceipt, decision, } = {}) | { repository, sourceSha, sourceTreeSha, runtimeSha, plan, planFileDigest, controllerReceipt, decision, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createWebSurfacePublicationCandidate } from \"@kungfu-tech/buildchain/core\";` | `packages/core/web-surface-publication-candidate.js:79` |\n| `decideChannelCandidate` | function: function decideChannelCandidate(input) | input | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { decideChannelCandidate } from \"@kungfu-tech/buildchain/core\";` | `packages/core/channel-candidate.js:90` |\n| `DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY` | constant: const DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY | none | value | Import does not declare a throw contract. | none-on-import | `import { DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:6` |\n| `defaultBuildchainLogPath` | function: function defaultBuildchainLogPath({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { defaultBuildchainLogPath } from \"@kungfu-tech/buildchain/core\";` | `packages/core/logging.js:41` |\n| `defaultPublishEvidencePath` | function: function defaultPublishEvidencePath(version, workspace = process.cwd()) | version, workspace = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { defaultPublishEvidencePath } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publish-transaction.js:193` |\n| `defaultReleaseStatePath` | function: function defaultReleaseStatePath(version, workspace = process.cwd()) | version, workspace = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { defaultReleaseStatePath } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publish-transaction.js:185` |\n| `DETACHED_ARTIFACT_SIGNATURE_CONTRACT` | constant: const DETACHED_ARTIFACT_SIGNATURE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { DETACHED_ARTIFACT_SIGNATURE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/detached-artifact-signature.js:10` |\n| `detectKfd3Surfaces` | function: function detectKfd3Surfaces({ cwd = process.cwd(), kinds = [], artifactPath = \"\" } = {}) | { cwd = process.cwd(), kinds = [], artifactPath = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { detectKfd3Surfaces } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd3-surface-register.js:423` |\n| `detectLockfile` | function: function detectLockfile(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { detectLockfile } from \"@kungfu-tech/buildchain/core\";` | `packages/core/package-manager.js:237` |\n| `detectPackageManager` | function: function detectPackageManager(cwd = process.cwd()) | cwd = process.cwd() | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { detectPackageManager } from \"@kungfu-tech/buildchain/core\";` | `packages/core/package-manager.js:56` |\n| `detectPublicationAuthoritySignals` | function: function detectPublicationAuthoritySignals(workflowText = \"\") | workflowText = \"\" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { detectPublicationAuthoritySignals } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:104` |\n| `detectRequestedParallelism` | function: function detectRequestedParallelism({ command = \"\", args = [], env = process.env, } = {}) | { command = \"\", args = [], env = process.env, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { detectRequestedParallelism } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:1188` |\n| `detectRequestedParallelismFromProcessSamples` | function: function detectRequestedParallelismFromProcessSamples(samples = []) | samples = [] | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { detectRequestedParallelismFromProcessSamples } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:1223` |\n| `discoverArtifactPassport` | function: async function discoverArtifactPassport({ subject, cwd = process.cwd(), passportLocation = \"\", locatorConfig = \"\", repository = \"\", tag = \"\", githubReleaseBaseUrl = \"\", } = {}) | { subject, cwd = process.cwd(), passportLocation = \"\", locatorConfig = \"\", repository = \"\", tag = \"\", githubReleaseBaseUrl = \"\", } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { discoverArtifactPassport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-passport.js:499` |\n| `discoverBuildchainRepoFiles` | function: function discoverBuildchainRepoFiles(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { discoverBuildchainRepoFiles } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:143` |\n| `discoverConfiguredDerivedVersionMaterial` | function: function discoverConfiguredDerivedVersionMaterial(cwd = process.cwd(), loadedConfig = loadBuildchainConfig(cwd)) | cwd = process.cwd(), loadedConfig = loadBuildchainConfig(cwd) | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { discoverConfiguredDerivedVersionMaterial } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:1467` |\n| `discoverConfiguredVersionStateFiles` | function: function discoverConfiguredVersionStateFiles(cwd = process.cwd(), loadedConfig = loadBuildchainConfig(cwd)) | cwd = process.cwd(), loadedConfig = loadBuildchainConfig(cwd) | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { discoverConfiguredVersionStateFiles } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:1428` |\n| `discoverKfdStandards` | function: function discoverKfdStandards() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { discoverKfdStandards } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd.js:464` |\n| `discoverPaperFleet` | function: function discoverPaperFleet(root = process.cwd()) | root = process.cwd() | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { discoverPaperFleet } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-fleet.js:23` |\n| `enumerateActionInputs` | function: function enumerateActionInputs({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateActionInputs } from \"@kungfu-tech/buildchain/core\";` | `packages/core/public-surface-audit.js:91` |\n| `enumerateCliCommandsFromBin` | function: function enumerateCliCommandsFromBin({ root = process.cwd(), binPath = \"bin/buildchain.mjs\", } = {}) | { root = process.cwd(), binPath = \"bin/buildchain.mjs\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateCliCommandsFromBin } from \"@kungfu-tech/buildchain/core\";` | `packages/core/public-surface-cli.js:93` |\n| `enumerateDocCommandRefs` | function: function enumerateDocCommandRefs({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateDocCommandRefs } from \"@kungfu-tech/buildchain/core\";` | `packages/core/public-surface-audit.js:115` |\n| `enumerateSitePages` | function: function enumerateSitePages({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateSitePages } from \"@kungfu-tech/buildchain/core\";` | `packages/core/public-surface-audit.js:106` |\n| `enumerateWorkflowInputs` | function: function enumerateWorkflowInputs({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateWorkflowInputs } from \"@kungfu-tech/buildchain/core\";` | `packages/core/public-surface-audit.js:74` |\n| `evaluateBuildchainContractLock` | function: function evaluateBuildchainContractLock({ lock, current, runtimeRef = \"\", runtimeSha = \"\", runtimeClass = \"\", compatibilityPolicy = \"\", } = {}) | { lock, current, runtimeRef = \"\", runtimeSha = \"\", runtimeClass = \"\", compatibilityPolicy = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { evaluateBuildchainContractLock } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-contract.js:853` |\n| `evaluateCodeownersAuthority` | function: function evaluateCodeownersAuthority({ source = \"\", sourcePath = \"\", reviewAuthority = \"kungfu-origin\", protectedPaths = PROTECTED_AUTHORITY_PATHS, } = {}) | { source = \"\", sourcePath = \"\", reviewAuthority = \"kungfu-origin\", protectedPaths = PROTECTED_AUTHORITY_PATHS, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluateCodeownersAuthority } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:425` |\n| `evaluateGithubGovernanceSnapshot` | function: function evaluateGithubGovernanceSnapshot({ descriptor = createBuildchainGithubGovernanceAuthority(), repository, targetRef, organizationPlan, codeowners, effectivePolicy, memberships, apiEvidence = {}, observedAt, expiresAt, verifier = {}, } = {}) | { descriptor = createBuildchainGithubGovernanceAuthority(), repository, targetRef, organizationPlan, codeowners, effectivePolicy, memberships, apiEvidence = {}, observedAt, expiresAt, verifier = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { evaluateGithubGovernanceSnapshot } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:694` |\n| `evaluateKfdProductGate` | function: async function evaluateKfdProductGate({ cwd = process.cwd(), input, expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {}) | { cwd = process.cwd(), input, expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluateKfdProductGate } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:465` |\n| `evaluatePublicationControlPlaneSnapshot` | function: function evaluatePublicationControlPlaneSnapshot({ repository, workflowPath, publisherWorkflowPath = workflowPath, environment, branch, packageName, publisherMode = \"npm-trusted-publisher\", requiredStatusCheck = \"check\", snapshot, observedAt, expiresAt, } = {}) | { repository, workflowPath, publisherWorkflowPath = workflowPath, environment, branch, packageName, publisherMode = \"npm-trusted-publisher\", requiredStatusCheck = \"check\", snapshot, observedAt, expiresAt, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluatePublicationControlPlaneSnapshot } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-control-plane-audit.js:75` |\n| `executePaperNpmBootstrap` | function: function executePaperNpmBootstrap(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { executePaperNpmBootstrap } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:2840` |\n| `executePaperWorkStart` | function: function executePaperWorkStart(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { executePaperWorkStart } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-work.js:169` |\n| `executePaperWorkSubmitPush` | function: function executePaperWorkSubmitPush(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { executePaperWorkSubmitPush } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-work.js:357` |\n| `executeReleasePropagationPush` | function: function executeReleasePropagationPush({ work, expectedWorkRoot, cwd = process.cwd(), remote = \"origin\", } = {}) | { work, expectedWorkRoot, cwd = process.cwd(), remote = \"origin\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { executeReleasePropagationPush } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-push.js:231` |\n| `explainArtifactPassport` | function: async function explainArtifactPassport(options = {}) | options = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { explainArtifactPassport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-passport.js:827` |\n| `explainKfdAgentHub` | function: function explainKfdAgentHub({ cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = \"\" } = {}) | { cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { explainKfdAgentHub } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-agent-hub.js:470` |\n| `explainReleaseLineDryRun` | function: function explainReleaseLineDryRun({ cwd = process.cwd(), targetRef, sha = \"\", sourceRef = \"\", tags, publishTransaction = false, publishCommand = \"\", } = {}) | { cwd = process.cwd(), targetRef, sha = \"\", sourceRef = \"\", tags, publishTransaction = false, publishCommand = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { explainReleaseLineDryRun } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-line-dry-run.js:127` |\n| `explainReleasePassport` | function: async function explainReleasePassport({ passportLocation, forAudience = \"human\" } = {}) | { passportLocation, forAudience = \"human\" } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { explainReleasePassport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:2812` |\n| `FAMILY_RELEASE_EVIDENCE_CONTRACT` | constant: const FAMILY_RELEASE_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { FAMILY_RELEASE_EVIDENCE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-candidate.js:5` |\n| `finalizeBuildchainContractWorld` | function: function finalizeBuildchainContractWorld(contractWorld) | contractWorld | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { finalizeBuildchainContractWorld } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-contract.js:762` |\n| `formatCandidateTimelineReport` | function: function formatCandidateTimelineReport(timeline) | timeline | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { formatCandidateTimelineReport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/candidate-timeline.js:438` |\n| `formatDiagnosticsSummaryTable` | function: function formatDiagnosticsSummaryTable(summary = {}) | summary = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { formatDiagnosticsSummaryTable } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:1786` |\n| `formatReleaseLineDryRun` | function: function formatReleaseLineDryRun(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { formatReleaseLineDryRun } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-line-dry-run.js:267` |\n| `getLifecycleStage` | function: function getLifecycleStage(loadedConfig, name) | loadedConfig, name | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { getLifecycleStage } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:1372` |\n| `getNativeDiagnosticsProfile` | function: function getNativeDiagnosticsProfile(loadedConfig) | loadedConfig | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { getNativeDiagnosticsProfile } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:520` |\n| `getPublishContract` | function: function getPublishContract(loadedConfig) | loadedConfig | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { getPublishContract } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:1376` |\n| `getStableReleasePolicy` | function: function getStableReleasePolicy(loadedConfig) | loadedConfig | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { getStableReleasePolicy } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:328` |\n| `getVersionStrategy` | function: function getVersionStrategy(loadedConfig) | loadedConfig | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { getVersionStrategy } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:1500` |\n| `getWorkspaceInfo` | function: function getWorkspaceInfo(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { getWorkspaceInfo } from \"@kungfu-tech/buildchain/core\";` | `packages/core/package-manager.js:211` |\n| `GITHUB_ARTIFACT_ATTESTATION_EVIDENCE_CONTRACT` | constant: const GITHUB_ARTIFACT_ATTESTATION_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_EVIDENCE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:9` |\n| `GITHUB_ARTIFACT_ATTESTATION_POLICY_CONTRACT` | constant: const GITHUB_ARTIFACT_ATTESTATION_POLICY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_POLICY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:5` |\n| `GITHUB_ARTIFACT_ATTESTATION_PREDICATE_CONTRACT` | constant: const GITHUB_ARTIFACT_ATTESTATION_PREDICATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_PREDICATE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:7` |\n| `GITHUB_ARTIFACT_ATTESTATION_PREDICATE_TYPE` | constant: const GITHUB_ARTIFACT_ATTESTATION_PREDICATE_TYPE | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_PREDICATE_TYPE } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:13` |\n| `GITHUB_ARTIFACT_ATTESTATION_VERIFICATION_CONTRACT` | constant: const GITHUB_ARTIFACT_ATTESTATION_VERIFICATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_VERIFICATION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:11` |\n| `GITHUB_ARTIFACT_ATTESTATION_WORKFLOW` | constant: const GITHUB_ARTIFACT_ATTESTATION_WORKFLOW | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_WORKFLOW } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:15` |\n| `GITHUB_GOVERNANCE_AUTHORITY_CONTRACT` | constant: const GITHUB_GOVERNANCE_AUTHORITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_GOVERNANCE_AUTHORITY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:3` |\n| `GITHUB_GOVERNANCE_RECEIPT_CONTRACT` | constant: const GITHUB_GOVERNANCE_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_GOVERNANCE_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:5` |\n| `GITHUB_GOVERNANCE_ROLLOUT_CONTRACT` | constant: const GITHUB_GOVERNANCE_ROLLOUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_GOVERNANCE_ROLLOUT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:7` |\n| `GITHUB_GOVERNANCE_RULESET_ROLLOUT_CONTRACT` | constant: const GITHUB_GOVERNANCE_RULESET_ROLLOUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_GOVERNANCE_RULESET_ROLLOUT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:9` |\n| `githubArtifactAttestationRequiredPermissions` | function: function githubArtifactAttestationRequiredPermissions() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { githubArtifactAttestationRequiredPermissions } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:640` |\n| `githubArtifactAttestationSemanticRoot` | function: function githubArtifactAttestationSemanticRoot(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { githubArtifactAttestationSemanticRoot } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:91` |\n| `githubArtifactAttestationSha256Buffer` | function: function githubArtifactAttestationSha256Buffer(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { githubArtifactAttestationSha256Buffer } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:83` |\n| `githubArtifactAttestationSha256File` | function: function githubArtifactAttestationSha256File(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { githubArtifactAttestationSha256File } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:87` |\n| `githubGovernanceDigest` | function: function githubGovernanceDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { githubGovernanceDigest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:163` |\n| `GitHubIssueRequestError` | class: class GitHubIssueRequestError | none | GitHubIssueRequestError | Construction and method errors follow the linked source implementation. | class-dependent | `import { GitHubIssueRequestError } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:23` |\n| `HOMEBREW_TAP_CHECK_CONTRACT` | constant: const HOMEBREW_TAP_CHECK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { HOMEBREW_TAP_CHECK_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/homebrew.js:6` |\n| `HOMEBREW_TAP_FACTS_CONTRACT` | constant: const HOMEBREW_TAP_FACTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { HOMEBREW_TAP_FACTS_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/homebrew.js:5` |\n| `HOMEBREW_TAP_MANIFEST_CONTRACT` | constant: const HOMEBREW_TAP_MANIFEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { HOMEBREW_TAP_MANIFEST_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/homebrew.js:7` |\n| `IMPACT_LEDGER_CONTRACT` | constant: const IMPACT_LEDGER_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { IMPACT_LEDGER_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:30` |\n| `initKfdAgentHub` | function: function initKfdAgentHub({ cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, write = false, force = false } = {}) | { cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, write = false, force = false } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { initKfdAgentHub } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-agent-hub.js:363` |\n| `inspectKfdAgentHub` | function: function inspectKfdAgentHub({ cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = \"\" } = {}) | { cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { inspectKfdAgentHub } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-agent-hub.js:384` |\n| `inspectReleasePropagationPushState` | function: function inspectReleasePropagationPushState({ work: workInput, cwd = process.cwd(), remote = \"origin\", } = {}) | { work: workInput, cwd = process.cwd(), remote = \"origin\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { inspectReleasePropagationPushState } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-push.js:174` |\n| `KFD_AGENT_HUB_ADOPTION_CONTRACT` | constant: const KFD_AGENT_HUB_ADOPTION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_ADOPTION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-agent-hub.js:9` |\n| `KFD_AGENT_HUB_ADOPTION_SCHEMA` | constant: const KFD_AGENT_HUB_ADOPTION_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_ADOPTION_SCHEMA } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-agent-hub.js:12` |\n| `KFD_AGENT_HUB_DECLARATION` | constant: const KFD_AGENT_HUB_DECLARATION | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_DECLARATION } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-agent-hub.js:7` |\n| `KFD_AGENT_HUB_LOCK_CONTRACT` | constant: const KFD_AGENT_HUB_LOCK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_LOCK_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-agent-hub.js:10` |\n| `KFD_AGENT_HUB_OUTPUT_DIR` | constant: const KFD_AGENT_HUB_OUTPUT_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_OUTPUT_DIR } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-agent-hub.js:8` |\n| `KFD_AGENT_HUB_VERIFICATION_CONTRACT` | constant: const KFD_AGENT_HUB_VERIFICATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_VERIFICATION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-agent-hub.js:11` |\n| `KFD_PRODUCT_GATE_CONTRACT` | constant: const KFD_PRODUCT_GATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_PRODUCT_GATE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:11` |\n| `KFD_PRODUCT_GATE_INPUT_CONTRACT` | constant: const KFD_PRODUCT_GATE_INPUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_PRODUCT_GATE_INPUT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:9` |\n| `KFD_PRODUCT_GATE_INPUT_SCHEMA` | constant: const KFD_PRODUCT_GATE_INPUT_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_PRODUCT_GATE_INPUT_SCHEMA } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:55` |\n| `KFD_PRODUCT_GATE_INPUT_SCHEMA_ID` | constant: const KFD_PRODUCT_GATE_INPUT_SCHEMA_ID | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_PRODUCT_GATE_INPUT_SCHEMA_ID } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:15` |\n| `KFD_SUPPORT_PROJECTION_CONTRACT` | constant: const KFD_SUPPORT_PROJECTION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_SUPPORT_PROJECTION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:13` |\n| `KFD_SUPPORT_PROJECTION_SCHEMA` | constant: const KFD_SUPPORT_PROJECTION_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_SUPPORT_PROJECTION_SCHEMA } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:130` |\n| `KFD_SUPPORT_PROJECTION_SCHEMA_ID` | constant: const KFD_SUPPORT_PROJECTION_SCHEMA_ID | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_SUPPORT_PROJECTION_SCHEMA_ID } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:17` |\n| `kfd1` | constant: const kfd1 | none | value | Import does not declare a throw contract. | none-on-import | `import { kfd1 } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd.js:546` |\n| `KFD1_RELEASE_GATE_CONTRACT` | constant: const KFD1_RELEASE_GATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD1_RELEASE_GATE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:9` |\n| `KFD1_WITNESS_SET_CONTRACT` | constant: const KFD1_WITNESS_SET_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD1_WITNESS_SET_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:10` |\n| `kfd2` | constant: const kfd2 | none | value | Import does not declare a throw contract. | none-on-import | `import { kfd2 } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd.js:561` |\n| `KFD2_PRODUCT_CLAIMS_OUTPUT_CONTRACT` | constant: const KFD2_PRODUCT_CLAIMS_OUTPUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_PRODUCT_CLAIMS_OUTPUT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd2-product-claims.js:23` |\n| `KFD2_PRODUCT_CLAIMS_REGISTRY_CONTRACT` | constant: const KFD2_PRODUCT_CLAIMS_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_PRODUCT_CLAIMS_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd2-product-claims.js:19` |\n| `KFD2_PRODUCT_CLAIMS_VALIDATION_CONTRACT` | constant: const KFD2_PRODUCT_CLAIMS_VALIDATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_PRODUCT_CLAIMS_VALIDATION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd2-product-claims.js:21` |\n| `KFD2_RELEASE_TRUST_PASSPORT_CONTRACT` | constant: const KFD2_RELEASE_TRUST_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_RELEASE_TRUST_PASSPORT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:35` |\n| `KFD2_TRUST_PROOF_CONTRACT` | constant: const KFD2_TRUST_PROOF_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_TRUST_PROOF_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:36` |\n| `kfd3` | constant: const kfd3 | none | value | Import does not declare a throw contract. | none-on-import | `import { kfd3 } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd.js:663` |\n| `KFD3_ARTIFACT_WITNESS_CONTRACT` | constant: const KFD3_ARTIFACT_WITNESS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_ARTIFACT_WITNESS_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:13` |\n| `KFD3_CAPABILITY_QUERY_CONTRACT` | constant: const KFD3_CAPABILITY_QUERY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_CAPABILITY_QUERY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd3-surface-register.js:9` |\n| `KFD3_DEFAULT_REGISTRY_PATH` | constant: const KFD3_DEFAULT_REGISTRY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_DEFAULT_REGISTRY_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd3-surface-register.js:10` |\n| `KFD3_PREBUILD_WITNESS_CONTRACT` | constant: const KFD3_PREBUILD_WITNESS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_PREBUILD_WITNESS_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:12` |\n| `KFD3_RELEASE_GATE_CONTRACT` | constant: const KFD3_RELEASE_GATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_RELEASE_GATE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:11` |\n| `KFD3_SURFACE_AUDIT_CONTRACT` | constant: const KFD3_SURFACE_AUDIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_SURFACE_AUDIT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd3-surface-register.js:8` |\n| `KFD3_SURFACE_DETECTION_CONTRACT` | constant: const KFD3_SURFACE_DETECTION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_SURFACE_DETECTION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd3-surface-register.js:7` |\n| `KFD3_SURFACE_REGISTRY_CONTRACT` | constant: const KFD3_SURFACE_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_SURFACE_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd3-surface-register.js:6` |\n| `kfd4` | constant: const kfd4 | none | value | Import does not declare a throw contract. | none-on-import | `import { kfd4 } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd.js:681` |\n| `kfdProductGateDigest` | function: function kfdProductGateDigest(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { kfdProductGateDigest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:188` |\n| `kfdProductGates` | constant: const kfdProductGates | none | value | Import does not declare a throw contract. | none-on-import | `import { kfdProductGates } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:859` |\n| `KFX_ADMISSION_INPUTS_CONTRACT` | constant: const KFX_ADMISSION_INPUTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFX_ADMISSION_INPUTS_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-verification-envelope.js:7` |\n| `layout` | constant: const layout | none | value | Import does not declare a throw contract. | none-on-import | `import { layout } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd.js:905` |\n| `LEGACY_BUILDCHAIN_CONFIG_PATH` | constant: const LEGACY_BUILDCHAIN_CONFIG_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_CONFIG_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:8` |\n| `LEGACY_BUILDCHAIN_CONTRACT_LOCK_PATH` | constant: const LEGACY_BUILDCHAIN_CONTRACT_LOCK_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_CONTRACT_LOCK_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:10` |\n| `LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH` | constant: const LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:28` |\n| `LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATHS` | constant: const LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATHS | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATHS } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:29` |\n| `LEGACY_BUILDCHAIN_RELEASE_PASSPORT_PATH` | constant: const LEGACY_BUILDCHAIN_RELEASE_PASSPORT_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_RELEASE_PASSPORT_PATH } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:34` |\n| `listArtifactSigningProfiles` | function: function listArtifactSigningProfiles() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { listArtifactSigningProfiles } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing.js:103` |\n| `listKfdSchemas` | function: function listKfdSchemas({ standard = \"\" } = {}) | { standard = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { listKfdSchemas } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd.js:492` |\n| `loadBuildchainConfig` | function: function loadBuildchainConfig(cwd = process.cwd()) | cwd = process.cwd() | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { loadBuildchainConfig } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:158` |\n| `loadConfiguredAnchorManifest` | function: function loadConfiguredAnchorManifest(cwd = process.cwd(), loadedConfig = loadBuildchainConfig(cwd)) | cwd = process.cwd(), loadedConfig = loadBuildchainConfig(cwd) | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { loadConfiguredAnchorManifest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:1509` |\n| `makeReleasePassportFixtureAssets` | function: function makeReleasePassportFixtureAssets(dir) | dir | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { makeReleasePassportFixtureAssets } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:2841` |\n| `MANUAL_UPSTREAM_PICKUP_CONFIG_CONTRACT` | constant: const MANUAL_UPSTREAM_PICKUP_CONFIG_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { MANUAL_UPSTREAM_PICKUP_CONFIG_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-pickup.js:16` |\n| `MANUAL_UPSTREAM_PICKUP_PLAN_CONTRACT` | constant: const MANUAL_UPSTREAM_PICKUP_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { MANUAL_UPSTREAM_PICKUP_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-pickup.js:18` |\n| `markStableCandidatePromoted` | function: function markStableCandidatePromoted(ledgerInput, versionInput, { stableTag = \"\", stableSha = \"\", now = new Date().toISOString() } = {}) | ledgerInput, versionInput, { stableTag = \"\", stableSha = \"\", now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { markStableCandidatePromoted } from \"@kungfu-tech/buildchain/core\";` | `packages/core/stable-candidate-ledger.js:229` |\n| `migrateBuildchainLayout` | function: function migrateBuildchainLayout({ cwd = process.cwd(), write = false, force = false } = {}) | { cwd = process.cwd(), write = false, force = false } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { migrateBuildchainLayout } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:287` |\n| `normalizeBuildchainConfig` | function: function normalizeBuildchainConfig(config) | config | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeBuildchainConfig } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:181` |\n| `normalizeBuildchainLogEvent` | function: function normalizeBuildchainLogEvent(input = {}, defaults = {}) | input = {}, defaults = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { normalizeBuildchainLogEvent } from \"@kungfu-tech/buildchain/core\";` | `packages/core/logging.js:45` |\n| `normalizeCandidateTimelineEvent` | function: function normalizeCandidateTimelineEvent(input = {}) | input = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeCandidateTimelineEvent } from \"@kungfu-tech/buildchain/core\";` | `packages/core/candidate-timeline.js:74` |\n| `normalizeControllerReceiptReferences` | function: function normalizeControllerReceiptReferences({ receipts = [], references = [], expectedSourceSha = \"\", acceptedSourceShas = [], expectedRuntimeSha = \"\", requirePassed = false, } = {}) | { receipts = [], references = [], expectedSourceSha = \"\", acceptedSourceShas = [], expectedRuntimeSha = \"\", requirePassed = false, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeControllerReceiptReferences } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:531` |\n| `normalizeGitHubArtifactAttestationPolicy` | function: function normalizeGitHubArtifactAttestationPolicy(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeGitHubArtifactAttestationPolicy } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:158` |\n| `normalizeGithubBranchProtectionSnapshot` | function: function normalizeGithubBranchProtectionSnapshot(protection = {}) | protection = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { normalizeGithubBranchProtectionSnapshot } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:1025` |\n| `normalizeGithubRulesetSnapshot` | function: function normalizeGithubRulesetSnapshot(ruleset = {}) | ruleset = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { normalizeGithubRulesetSnapshot } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:1095` |\n| `normalizeIssueRepository` | function: function normalizeIssueRepository(repository = DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY) | repository = DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeIssueRepository } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:33` |\n| `normalizeKfd1ContractWorldWitness` | function: function normalizeKfd1ContractWorldWitness(witness, { metadata = resolveKfd1Metadata() } = {}) | witness, { metadata = resolveKfd1Metadata() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfd1ContractWorldWitness } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:897` |\n| `normalizeKfd3CollaborationInterfaceArtifactWitness` | function: function normalizeKfd3CollaborationInterfaceArtifactWitness(witness, { metadata = resolveKfd3Metadata() } = {}) | witness, { metadata = resolveKfd3Metadata() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfd3CollaborationInterfaceArtifactWitness } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:738` |\n| `normalizeKfd3CollaborationInterfacePrebuildWitness` | function: function normalizeKfd3CollaborationInterfacePrebuildWitness(witness, { metadata = resolveKfd3Metadata() } = {}) | witness, { metadata = resolveKfd3Metadata() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfd3CollaborationInterfacePrebuildWitness } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:667` |\n| `normalizeKfd3DistributionDeclaration` | function: function normalizeKfd3DistributionDeclaration(distribution, { surfaceId = \"surface\" } = {}) | distribution, { surfaceId = \"surface\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfd3DistributionDeclaration } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd3-surface-register.js:73` |\n| `normalizeKfdStandardId` | function: function normalizeKfdStandardId(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfdStandardId } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd.js:455` |\n| `normalizeLifecycleStage` | function: function normalizeLifecycleStage(stage, label = \"lifecycle stage\", lifecycle = {}) | stage, label = \"lifecycle stage\", lifecycle = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeLifecycleStage } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:1333` |\n| `normalizeManualUpstreamPickupConfig` | function: function normalizeManualUpstreamPickupConfig(input) | input | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeManualUpstreamPickupConfig } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-pickup.js:118` |\n| `normalizePackageReleasePropagationConfig` | function: function normalizePackageReleasePropagationConfig(input) | input | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizePackageReleasePropagationConfig } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-capture.js:63` |\n| `normalizeReleasePropagationGraph` | function: function normalizeReleasePropagationGraph(input) | input | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeReleasePropagationGraph } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation.js:163` |\n| `normalizeSiteUpstreamIntent` | function: function normalizeSiteUpstreamIntent(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeSiteUpstreamIntent } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-agent-entry.js:77` |\n| `normalizeStableCandidateLedger` | function: function normalizeStableCandidateLedger(input, expected = {}) | input, expected = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeStableCandidateLedger } from \"@kungfu-tech/buildchain/core\";` | `packages/core/stable-candidate-ledger.js:76` |\n| `PACKAGE_RELEASE_PROPAGATION_CONFIG_CONTRACT` | constant: const PACKAGE_RELEASE_PROPAGATION_CONFIG_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PACKAGE_RELEASE_PROPAGATION_CONFIG_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-capture.js:17` |\n| `PAPER_ALPHA_PLAN_CONTRACT` | constant: const PAPER_ALPHA_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_ALPHA_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:90` |\n| `PAPER_BUILD_PLAN_CONTRACT` | constant: const PAPER_BUILD_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_BUILD_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:89` |\n| `PAPER_FLEET_AUDIT_CONTRACT` | constant: const PAPER_FLEET_AUDIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_FLEET_AUDIT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-fleet.js:19` |\n| `PAPER_FLEET_UPDATE_PLAN_CONTRACT` | constant: const PAPER_FLEET_UPDATE_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_FLEET_UPDATE_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-fleet.js:20` |\n| `PAPER_MIGRATION_CONTRACT` | constant: const PAPER_MIGRATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_MIGRATION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:82` |\n| `PAPER_NPM_BOOTSTRAP_CONTRACT` | constant: const PAPER_NPM_BOOTSTRAP_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_NPM_BOOTSTRAP_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:85` |\n| `PAPER_PATHS` | constant: const PAPER_PATHS | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_PATHS } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-repository.js:7` |\n| `PAPER_PREFLIGHT_CONTRACT` | constant: const PAPER_PREFLIGHT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_PREFLIGHT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:83` |\n| `PAPER_RESUME_PLAN_CONTRACT` | constant: const PAPER_RESUME_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_RESUME_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:91` |\n| `PAPER_SCAFFOLD_CONTRACT` | constant: const PAPER_SCAFFOLD_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_SCAFFOLD_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:81` |\n| `PAPER_STATE_ORDER` | constant: const PAPER_STATE_ORDER | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_STATE_ORDER } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:94` |\n| `PAPER_STATUS_CONTRACT` | constant: const PAPER_STATUS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_STATUS_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:84` |\n| `PAPER_VISIBILITY_CONTRACT` | constant: const PAPER_VISIBILITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_VISIBILITY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:92` |\n| `PAPER_WORK_START_PLAN_CONTRACT` | constant: const PAPER_WORK_START_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_WORK_START_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-work.js:17` |\n| `PAPER_WORK_SUBMIT_PLAN_CONTRACT` | constant: const PAPER_WORK_SUBMIT_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_WORK_SUBMIT_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-work.js:19` |\n| `paperFleetTransitionWorkspace` | function: function paperFleetTransitionWorkspace(workspaceText, lockText) | workspaceText, lockText | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { paperFleetTransitionWorkspace } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-fleet.js:290` |\n| `parseCodeowners` | function: function parseCodeowners(source) | source | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { parseCodeowners } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:401` |\n| `parseIssueLabels` | function: function parseIssueLabels(input = DEFAULT_LABELS) | input = DEFAULT_LABELS | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { parseIssueLabels } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:41` |\n| `planBuildchainLayoutMigration` | function: function planBuildchainLayoutMigration({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { planBuildchainLayoutMigration } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:265` |\n| `planPaperFleetUpdate` | function: function planPaperFleetUpdate(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { planPaperFleetUpdate } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-fleet.js:209` |\n| `planPaperMigration` | function: function planPaperMigration({ cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainSha = \"\", } = {}) | { cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainSha = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { planPaperMigration } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:1013` |\n| `planPaperScaffold` | function: function planPaperScaffold({ cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainRef = \"v3\", buildchainSha = \"\", name = path.basename(path.resolve(cwd)), title = \"\", packageName = \"\", repository = \"\", version = \"0.1.0-alpha.0\", siteBaseUrl = \"\", } = {}) | { cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainRef = \"v3\", buildchainSha = \"\", name = path.basename(path.resolve(cwd)), title = \"\", packageName = \"\", repository = \"\", version = \"0.1.0-alpha.0\", siteBaseUrl = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { planPaperScaffold } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:702` |\n| `planReleaseLineBootstrap` | function: function planReleaseLineBootstrap({ cwd = process.cwd(), major, minor, sourceRef = \"\", initialVersion = \"\", requiredStatusCheck = \"check\", setDefault = true, createAlphaPr = true, approvalCount = 1, bootstrapBranch = \"\", } = {}) | { cwd = process.cwd(), major, minor, sourceRef = \"\", initialVersion = \"\", requiredStatusCheck = \"check\", setDefault = true, createAlphaPr = true, approvalCount = 1, bootstrapBranch = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { planReleaseLineBootstrap } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-line-bootstrap.js:140` |\n| `planReleasePropagation` | function: function planReleasePropagation({ graph: graphInput, upstreamRelease: releaseInput, sourceNode = \"\" } = {}) | { graph: graphInput, upstreamRelease: releaseInput, sourceNode = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { planReleasePropagation } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation.js:249` |\n| `planSiteUpstreamAgentEntry` | function: function planSiteUpstreamAgentEntry({ sourceId: sourceInput, channel = \"\", handoffWork = null, } = {}) | { sourceId: sourceInput, channel = \"\", handoffWork = null, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { planSiteUpstreamAgentEntry } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-agent-entry.js:134` |\n| `planTransactionRecovery` | function: function planTransactionRecovery({ transaction, evidence, validation, explicitOverride = false, } = {}) | { transaction, evidence, validation, explicitOverride = false, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { planTransactionRecovery } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publish-transaction.js:769` |\n| `prepareGitHubArtifactAttestation` | function: function prepareGitHubArtifactAttestation({ subjectPath, platformManifestPath, releasePassportPath, policy, expectedBuildchainRef = \"\", expectedCallerRepository = \"\", expectedSourceSha = \"\", } = {}) | { subjectPath, platformManifestPath, releasePassportPath, policy, expectedBuildchainRef = \"\", expectedCallerRepository = \"\", expectedSourceSha = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { prepareGitHubArtifactAttestation } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:250` |\n| `preparePublicationNpmPackage` | function: function preparePublicationNpmPackage({ cwd = process.cwd(), outputDir = \".buildchain/publication/npm-package\", packageName = \"\", } = {}) | { cwd = process.cwd(), outputDir = \".buildchain/publication/npm-package\", packageName = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { preparePublicationNpmPackage } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-package.js:120` |\n| `PRODUCT_MECHANISM_CONTRACT` | constant: const PRODUCT_MECHANISM_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PRODUCT_MECHANISM_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:32` |\n| `projectArtifactVerificationEnvelopeToKfx` | function: function projectArtifactVerificationEnvelopeToKfx({ envelope, assessmentTime = Math.floor(Date.now() / 1000), expectedEnvelopeRoot = \"\", expectedIssuer = \"\", expectedPublisher = \"\", expectedContractVersion = \"\", } = {}) | { envelope, assessmentTime = Math.floor(Date.now() / 1000), expectedEnvelopeRoot = \"\", expectedIssuer = \"\", expectedPublisher = \"\", expectedContractVersion = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { projectArtifactVerificationEnvelopeToKfx } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-verification-envelope.js:359` |\n| `PUBLICATION_ADMISSION_CONTRACT` | constant: const PUBLICATION_ADMISSION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ADMISSION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:10` |\n| `PUBLICATION_ARTIFACT_ARCHIVE_CONTRACT` | constant: const PUBLICATION_ARTIFACT_ARCHIVE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_ARCHIVE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-artifact.js:9` |\n| `PUBLICATION_ARTIFACT_CANDIDATE_CONTRACT` | constant: const PUBLICATION_ARTIFACT_CANDIDATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_CANDIDATE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-artifact-candidate.js:5` |\n| `PUBLICATION_ARTIFACT_MANIFEST_CONTRACT` | constant: const PUBLICATION_ARTIFACT_MANIFEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_MANIFEST_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-artifact.js:7` |\n| `PUBLICATION_ARTIFACT_MANIFEST_SET_CONTRACT` | constant: const PUBLICATION_ARTIFACT_MANIFEST_SET_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_MANIFEST_SET_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:24` |\n| `PUBLICATION_ARTIFACT_PASSPORT_CONTRACT` | constant: const PUBLICATION_ARTIFACT_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_PASSPORT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-artifact.js:8` |\n| `PUBLICATION_ARTIFACT_REGISTRY_CONTRACT` | constant: const PUBLICATION_ARTIFACT_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-artifact.js:10` |\n| `PUBLICATION_AUTHORITY_CLASSES` | constant: const PUBLICATION_AUTHORITY_CLASSES | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_AUTHORITY_CLASSES } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:27` |\n| `PUBLICATION_AUTHORITY_REGISTRY_CONTRACT` | constant: const PUBLICATION_AUTHORITY_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_AUTHORITY_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:8` |\n| `PUBLICATION_CAPABILITY_CONTRACT` | constant: const PUBLICATION_CAPABILITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_CAPABILITY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:12` |\n| `PUBLICATION_CONTROL_PLANE_AUDIT_CONTRACT` | constant: const PUBLICATION_CONTROL_PLANE_AUDIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_CONTROL_PLANE_AUDIT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:16` |\n| `PUBLICATION_GATE_DECISION_CONTRACT` | constant: const PUBLICATION_GATE_DECISION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_GATE_DECISION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:18` |\n| `PUBLICATION_NPM_PACKAGE_CONTRACT` | constant: const PUBLICATION_NPM_PACKAGE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_NPM_PACKAGE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-package.js:6` |\n| `PUBLICATION_QUALIFICATION_RECEIPT_CONTRACT` | constant: const PUBLICATION_QUALIFICATION_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_QUALIFICATION_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:22` |\n| `PUBLICATION_REPRODUCIBILITY_RECEIPT_CONTRACT` | constant: const PUBLICATION_REPRODUCIBILITY_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_REPRODUCIBILITY_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-reproducibility.js:12` |\n| `PUBLICATION_SEALED_BUNDLE_CONTRACT` | constant: const PUBLICATION_SEALED_BUNDLE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_SEALED_BUNDLE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-sealed-bundle.js:10` |\n| `publicationArtifactCandidateDigest` | function: function publicationArtifactCandidateDigest(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { publicationArtifactCandidateDigest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-artifact-candidate.js:19` |\n| `publicationAuthorityDigest` | function: function publicationAuthorityDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { publicationAuthorityDigest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:72` |\n| `publicationGateAggregateBindings` | function: function publicationGateAggregateBindings(gateAggregate) | gateAggregate | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { publicationGateAggregateBindings } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:408` |\n| `qualifyStableCandidate` | function: function qualifyStableCandidate(ledgerInput, observation, { minimumSoakSeconds = 3600, now = new Date().toISOString() } = {}) | ledgerInput, observation, { minimumSoakSeconds = 3600, now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { qualifyStableCandidate } from \"@kungfu-tech/buildchain/core\";` | `packages/core/stable-candidate-ledger.js:139` |\n| `queryKfd3Capabilities` | function: async function queryKfd3Capabilities({ cwd = process.cwd(), product = \"\", registryPath = \"\", passportLocation = \"\", artifactPath = \"\", } = {}) | { cwd = process.cwd(), product = \"\", registryPath = \"\", passportLocation = \"\", artifactPath = \"\", } = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { queryKfd3Capabilities } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd3-surface-register.js:824` |\n| `readBuildchainContractLock` | function: function readBuildchainContractLock(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readBuildchainContractLock } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-contract.js:838` |\n| `readBuildchainContractWorld` | function: function readBuildchainContractWorld(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readBuildchainContractWorld } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-contract.js:818` |\n| `readBuildchainLogEvents` | function: function readBuildchainLogEvents(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readBuildchainLogEvents } from \"@kungfu-tech/buildchain/core\";` | `packages/core/logging.js:75` |\n| `readDiagnosticsArtifact` | function: function readDiagnosticsArtifact(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readDiagnosticsArtifact } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:1468` |\n| `readJsonFromLocation` | function: async function readJsonFromLocation(location, redirectCount = 0, { timeoutMs = 15_000 } = {}) | location, redirectCount = 0, { timeoutMs = 15_000 } = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readJsonFromLocation } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:2694` |\n| `readKfd2ProductClaimsRegistry` | function: function readKfd2ProductClaimsRegistry({ cwd = process.cwd(), registryPath = BUILDCHAIN_KFD2_REGISTRY_PATH, } = {}) | { cwd = process.cwd(), registryPath = BUILDCHAIN_KFD2_REGISTRY_PATH, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readKfd2ProductClaimsRegistry } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd2-product-claims.js:137` |\n| `readKfd3SurfaceRegistry` | function: function readKfd3SurfaceRegistry({ cwd = process.cwd(), registryPath = \"\" } = {}) | { cwd = process.cwd(), registryPath = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readKfd3SurfaceRegistry } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd3-surface-register.js:455` |\n| `readKfdSchema` | function: function readKfdSchema({ standard, schema = \"\" } = {}) | { standard, schema = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readKfdSchema } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd.js:520` |\n| `README_BADGE_BLOCK_END` | constant: const README_BADGE_BLOCK_END | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_BLOCK_END } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:15` |\n| `README_BADGE_BLOCK_START` | constant: const README_BADGE_BLOCK_START | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_BLOCK_START } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:14` |\n| `README_BADGE_FACTS_CONTRACT` | constant: const README_BADGE_FACTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_FACTS_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:12` |\n| `README_BADGE_HOSTED_BASE_URL` | constant: const README_BADGE_HOSTED_BASE_URL | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_HOSTED_BASE_URL } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:16` |\n| `readOptionalIssueBodyFile` | function: function readOptionalIssueBodyFile(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readOptionalIssueBodyFile } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:385` |\n| `readPublishEvidence` | function: function readPublishEvidence(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readPublishEvidence } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publish-transaction.js:564` |\n| `readReadme` | function: function readReadme({ cwd = process.cwd(), readmePath = \"README.md\" } = {}) | { cwd = process.cwd(), readmePath = \"README.md\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readReadme } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:891` |\n| `readReleasePropagationJson` | function: function readReleasePropagationJson(value, { cwd = process.cwd(), label = \"json\" } = {}) | value, { cwd = process.cwd(), label = \"json\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readReleasePropagationJson } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation.js:305` |\n| `readReleaseTransaction` | function: function readReleaseTransaction(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readReleaseTransaction } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publish-transaction.js:367` |\n| `recordReleaseActivationPhase` | function: function recordReleaseActivationPhase(transaction, phaseId, { receiptRoots = [], failure = \"\" } = {}) | transaction, phaseId, { receiptRoots = [], failure = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { recordReleaseActivationPhase } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-activation-transaction.js:217` |\n| `recordReleasePropagationStage` | function: function recordReleasePropagationStage({ work, expectedWorkRoot, receipt } = {}) | { work, expectedWorkRoot, receipt } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { recordReleasePropagationStage } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-work-transitions.js:45` |\n| `redactBuildchainLogAttributes` | function: function redactBuildchainLogAttributes(attributes = {}) | attributes = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { redactBuildchainLogAttributes } from \"@kungfu-tech/buildchain/core\";` | `packages/core/logging.js:33` |\n| `redactDiagnosticsValue` | function: function redactDiagnosticsValue(key, value, pattern = DEFAULT_SECRET_KEY_PATTERN) | key, value, pattern = DEFAULT_SECRET_KEY_PATTERN | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { redactDiagnosticsValue } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:953` |\n| `redactIssueText` | function: function redactIssueText(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { redactIssueText } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:51` |\n| `registerKfd3Surfaces` | function: function registerKfd3Surfaces({ cwd = process.cwd(), registryPath = \"\", kinds = [], artifactPath = \"\", product = {}, } = {}) | { cwd = process.cwd(), registryPath = \"\", kinds = [], artifactPath = \"\", product = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { registerKfd3Surfaces } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd3-surface-register.js:502` |\n| `registerStableCandidate` | function: function registerStableCandidate(ledgerInput, candidateInput, { now = new Date().toISOString() } = {}) | ledgerInput, candidateInput, { now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { registerStableCandidate } from \"@kungfu-tech/buildchain/core\";` | `packages/core/stable-candidate-ledger.js:106` |\n| `RELEASE_ACTIVATION_CONTRACT` | constant: const RELEASE_ACTIVATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_ACTIVATION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-activation-transaction.js:3` |\n| `RELEASE_ACTIVATION_PHASES` | constant: const RELEASE_ACTIVATION_PHASES | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_ACTIVATION_PHASES } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-activation-transaction.js:8` |\n| `RELEASE_ACTIVATION_RECEIPT_SET_CONTRACT` | constant: const RELEASE_ACTIVATION_RECEIPT_SET_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_ACTIVATION_RECEIPT_SET_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-activation-transaction.js:5` |\n| `RELEASE_CANDIDATE_PASSPORT_CONTRACT` | constant: const RELEASE_CANDIDATE_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_CANDIDATE_PASSPORT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-candidate.js:4` |\n| `RELEASE_CHECK_REPORT_CONTRACT` | constant: const RELEASE_CHECK_REPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_CHECK_REPORT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:33` |\n| `RELEASE_EVIDENCE_ATTACHMENT_CONTRACT` | constant: const RELEASE_EVIDENCE_ATTACHMENT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_EVIDENCE_ATTACHMENT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:34` |\n| `RELEASE_PASSPORT_CHECK_MANIFEST_CONTRACT` | constant: const RELEASE_PASSPORT_CHECK_MANIFEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PASSPORT_CHECK_MANIFEST_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport-contract.js:9` |\n| `RELEASE_PASSPORT_CONTRACT` | constant: const RELEASE_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PASSPORT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:28` |\n| `RELEASE_PASSPORT_SCHEMA` | constant: const RELEASE_PASSPORT_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PASSPORT_SCHEMA } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport-contract.js:16` |\n| `RELEASE_PASSPORT_SCHEMA_ID` | constant: const RELEASE_PASSPORT_SCHEMA_ID | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PASSPORT_SCHEMA_ID } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport-contract.js:7` |\n| `RELEASE_PROPAGATION_FAILURE_MATRIX` | constant: const RELEASE_PROPAGATION_FAILURE_MATRIX | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_FAILURE_MATRIX } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-agent-entry.js:66` |\n| `RELEASE_PROPAGATION_FAILURE_MATRIX_CONTRACT` | constant: const RELEASE_PROPAGATION_FAILURE_MATRIX_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_FAILURE_MATRIX_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-agent-entry.js:11` |\n| `RELEASE_PROPAGATION_GRAPH_CONTRACT` | constant: const RELEASE_PROPAGATION_GRAPH_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_GRAPH_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation.js:15` |\n| `RELEASE_PROPAGATION_LOCK_CONTRACT` | constant: const RELEASE_PROPAGATION_LOCK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_LOCK_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation.js:17` |\n| `RELEASE_PROPAGATION_PLAN_CONTRACT` | value: RELEASE_PROPAGATION_PLAN_CONTRACT | none | unknown | No narrower error contract was mechanically discoverable. | unknown | `import { RELEASE_PROPAGATION_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation.js:1` |\n| `RELEASE_PROPAGATION_PUSH_PLAN_CONTRACT` | constant: const RELEASE_PROPAGATION_PUSH_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_PUSH_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-push.js:14` |\n| `RELEASE_PROPAGATION_PUSH_RESULT_CONTRACT` | constant: const RELEASE_PROPAGATION_PUSH_RESULT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_PUSH_RESULT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-push.js:16` |\n| `RELEASE_PROPAGATION_RECEIPT_CONTRACT` | constant: const RELEASE_PROPAGATION_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation.js:18` |\n| `RELEASE_PROPAGATION_STAGE_RECEIPT_CONTRACT` | constant: const RELEASE_PROPAGATION_STAGE_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_STAGE_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-work-constants.js:2` |\n| `RELEASE_PROPAGATION_WORK_CONTRACT` | constant: const RELEASE_PROPAGATION_WORK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_WORK_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-work-constants.js:1` |\n| `RELEASE_PROPAGATION_WORK_STAGES` | constant: const RELEASE_PROPAGATION_WORK_STAGES | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_WORK_STAGES } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-work-constants.js:4` |\n| `releaseActivationRoot` | function: function releaseActivationRoot(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { releaseActivationRoot } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-activation-transaction.js:38` |\n| `renderBadgeBundleBlock` | function: function renderBadgeBundleBlock(facts) | facts | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { renderBadgeBundleBlock } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:840` |\n| `renderBuildchainContractDriftIssueBody` | function: function renderBuildchainContractDriftIssueBody({ repository = \"\", workflow = \"\", runUrl = \"\", lockPath = \"\", evaluation, } = {}) | { repository = \"\", workflow = \"\", runUrl = \"\", lockPath = \"\", evaluation, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { renderBuildchainContractDriftIssueBody } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-contract.js:957` |\n| `renderHomebrewFormula` | function: function renderHomebrewFormula(facts) | facts | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { renderHomebrewFormula } from \"@kungfu-tech/buildchain/core\";` | `packages/core/homebrew.js:290` |\n| `renderKfd2ProductClaimOutputs` | function: function renderKfd2ProductClaimOutputs({ cwd = process.cwd(), registryPath = BUILDCHAIN_KFD2_REGISTRY_PATH, outputDir = BUILDCHAIN_KFD2_DIR, version = \"\", channel = \"\", tag = \"\", sourceSha = \"\", } = {}) | { cwd = process.cwd(), registryPath = BUILDCHAIN_KFD2_REGISTRY_PATH, outputDir = BUILDCHAIN_KFD2_DIR, version = \"\", channel = \"\", tag = \"\", sourceSha = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { renderKfd2ProductClaimOutputs } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd2-product-claims.js:321` |\n| `renderReadmeBadgeBlock` | function: function renderReadmeBadgeBlock(facts) | facts | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { renderReadmeBadgeBlock } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:836` |\n| `repairReleasePropagationWork` | function: function repairReleasePropagationWork({ work, expectedWorkRoot, receipt } = {}) | { work, expectedWorkRoot, receipt } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { repairReleasePropagationWork } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-work-transitions.js:88` |\n| `reportBuildchainIssue` | function: async function reportBuildchainIssue(options = {}) | options = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { reportBuildchainIssue } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:292` |\n| `reportWorkflowFrictionIssue` | function: async function reportWorkflowFrictionIssue(options = {}) | options = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { reportWorkflowFrictionIssue } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:378` |\n| `resolveArtifactSigningProfile` | function: function resolveArtifactSigningProfile({ profile = \"auto\", platform = \"\", artifactKind = \"binary\", } = {}) | { profile = \"auto\", platform = \"\", artifactKind = \"binary\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveArtifactSigningProfile } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing.js:111` |\n| `resolveArtifactSubject` | function: async function resolveArtifactSubject(subject, { cwd = process.cwd(), subjectDigest = \"\", subjectKind = \"\", npmRegistryBaseUrl = \"\", } = {}) | subject, { cwd = process.cwd(), subjectDigest = \"\", subjectKind = \"\", npmRegistryBaseUrl = \"\", } = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveArtifactSubject } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-passport.js:368` |\n| `resolveBuildchainConfigPath` | function: function resolveBuildchainConfigPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveBuildchainConfigPath } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:67` |\n| `resolveBuildchainContractLockPath` | function: function resolveBuildchainContractLockPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveBuildchainContractLockPath } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:74` |\n| `resolveGithubGovernanceTargetPolicy` | function: function resolveGithubGovernanceTargetPolicy({ descriptor = BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY, repository, targetRef, } = {}) | { descriptor = BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY, repository, targetRef, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveGithubGovernanceTargetPolicy } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:607` |\n| `resolveKfd1Metadata` | function: function resolveKfd1Metadata() | none | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveKfd1Metadata } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:89` |\n| `resolveKfd2ProductClaimsRegistryPath` | function: function resolveKfd2ProductClaimsRegistryPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveKfd2ProductClaimsRegistryPath } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:81` |\n| `resolveKfd3Metadata` | function: function resolveKfd3Metadata({ requireSchemas = false } = {}) | { requireSchemas = false } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveKfd3Metadata } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:128` |\n| `resolveKfd3SurfaceRegistryPath` | function: function resolveKfd3SurfaceRegistryPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveKfd3SurfaceRegistryPath } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:85` |\n| `resolveNpmRegistryRelease` | function: function resolveNpmRegistryRelease({ source: sourceInput, channel, packageMetadata, attestations, }) | { source: sourceInput, channel, packageMetadata, attestations, } | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveNpmRegistryRelease } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-pickup.js:167` |\n| `resolvePaperRepository` | function: function resolvePaperRepository(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolvePaperRepository } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-repository.js:133` |\n| `resolvePropagationChannel` | function: function resolvePropagationChannel(edge, upstreamChannel) | edge, upstreamChannel | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolvePropagationChannel } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation.js:190` |\n| `resolvePublicationCandidateFile` | function: function resolvePublicationCandidateFile(files = [], candidatePath) | files = [], candidatePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolvePublicationCandidateFile } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-artifact-candidate.js:23` |\n| `resolveReleasePassportPath` | function: function resolveReleasePassportPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveReleasePassportPath } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-layout.js:92` |\n| `resumeReleasePropagationWork` | function: function resumeReleasePropagationWork(work) | work | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resumeReleasePropagationWork } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-work.js:518` |\n| `revokeStableCandidate` | function: function revokeStableCandidate(ledgerInput, versionInput, { reason, actor = \"\", now = new Date().toISOString() } = {}) | ledgerInput, versionInput, { reason, actor = \"\", now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { revokeStableCandidate } from \"@kungfu-tech/buildchain/core\";` | `packages/core/stable-candidate-ledger.js:185` |\n| `rollbackReleaseActivationTransaction` | function: function rollbackReleaseActivationTransaction(transaction, { toSiteSourceSha, reason } = {}) | transaction, { toSiteSourceSha, reason } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { rollbackReleaseActivationTransaction } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-activation-transaction.js:290` |\n| `runLifecycleStage` | function: function runLifecycleStage({ cwd = process.cwd(), loadedConfig, name, stage, env: extraEnv, timeoutMinutes }) | { cwd = process.cwd(), loadedConfig, name, stage, env: extraEnv, timeoutMinutes } | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { runLifecycleStage } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:1380` |\n| `RUNNER_PROVENANCE_CLASSES` | constant: const RUNNER_PROVENANCE_CLASSES | none | value | Import does not declare a throw contract. | none-on-import | `import { RUNNER_PROVENANCE_CLASSES } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:36` |\n| `RUNNER_PROVENANCE_CONTRACT` | constant: const RUNNER_PROVENANCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RUNNER_PROVENANCE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:14` |\n| `schemas` | constant: const schemas | none | value | Import does not declare a throw contract. | none-on-import | `import { schemas } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd.js:495` |\n| `sealArtifactVerificationReport` | function: function sealArtifactVerificationReport({ report, bindings, kfdAssessment, issuedAt, expiresAt, revocation, } = {}) | { report, bindings, kfdAssessment, issuedAt, expiresAt, revocation, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sealArtifactVerificationReport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-verification-envelope.js:314` |\n| `selectStableCandidate` | function: function selectStableCandidate(ledgerInput, { releaseNow = \"\", now = new Date().toISOString() } = {}) | ledgerInput, { releaseNow = \"\", now = new Date().toISOString() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { selectStableCandidate } from \"@kungfu-tech/buildchain/core\";` | `packages/core/stable-candidate-ledger.js:206` |\n| `setStableCandidateHold` | function: function setStableCandidateHold(ledgerInput, enabled, { reason = \"\", now = new Date().toISOString() } = {}) | ledgerInput, enabled, { reason = \"\", now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { setStableCandidateHold } from \"@kungfu-tech/buildchain/core\";` | `packages/core/stable-candidate-ledger.js:198` |\n| `sha256BuildchainContractJson` | function: function sha256Json(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { sha256BuildchainContractJson } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-contract.js:30` |\n| `sha256File` | function: function sha256File(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write, subprocess | `import { sha256File } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:216` |\n| `sha256Json` | function: function sha256Json(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sha256Json } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-candidate.js:90` |\n| `sha256KfdJson` | function: function sha256Json(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { sha256KfdJson } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:50` |\n| `sha256Text` | function: function sha256Text(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sha256Text } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:138` |\n| `sha512IntegrityBuffer` | function: function sha512IntegrityBuffer(buffer) | buffer | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { sha512IntegrityBuffer } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-passport.js:34` |\n| `sha512IntegrityFile` | function: function sha512IntegrityFile(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sha512IntegrityFile } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-passport.js:38` |\n| `shellJoin` | function: function shellJoin(command) | command | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { shellJoin } from \"@kungfu-tech/buildchain/core\";` | `packages/core/package-manager.js:114` |\n| `signDetachedArtifactRequest` | function: function signDetachedArtifactRequest({ request, privateKey, keyId, authority = {}, } = {}) | { request, privateKey, keyId, authority = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { signDetachedArtifactRequest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/detached-artifact-signature.js:36` |\n| `SITE_UPSTREAM_AGENT_ENTRY_CONTRACT` | constant: const SITE_UPSTREAM_AGENT_ENTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { SITE_UPSTREAM_AGENT_ENTRY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-agent-entry.js:9` |\n| `STABLE_CANDIDATE_LEDGER_CONTRACT` | constant: const STABLE_CANDIDATE_LEDGER_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { STABLE_CANDIDATE_LEDGER_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/stable-candidate-ledger.js:1` |\n| `STABLE_CANDIDATE_STATES` | constant: const STABLE_CANDIDATE_STATES | none | value | Import does not declare a throw contract. | none-on-import | `import { STABLE_CANDIDATE_STATES } from \"@kungfu-tech/buildchain/core\";` | `packages/core/stable-candidate-ledger.js:2` |\n| `stableCandidatePromotionRefs` | function: function stableCandidatePromotionRefs(candidateInput, targetBranch) | candidateInput, targetBranch | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { stableCandidatePromotionRefs } from \"@kungfu-tech/buildchain/core\";` | `packages/core/stable-candidate-ledger.js:264` |\n| `startProcessSampler` | function: function startProcessSampler({ rootPid = process.pid, intervalMs = 15000, label = \"\", command = \"\", args = [], env = process.env, requestedParallelism = 0, onSample = () => undefined, cwd = process.cwd(), } = {}) | { rootPid = process.pid, intervalMs = 15000, label = \"\", command = \"\", args = [], env = process.env, requestedParallelism = 0, onSample = () => undefined, cwd = process.cwd(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { startProcessSampler } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:1362` |\n| `summarizeBuildchainLogEvents` | function: function summarizeBuildchainLogEvents(input = {}) | input = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { summarizeBuildchainLogEvents } from \"@kungfu-tech/buildchain/core\";` | `packages/core/logging.js:192` |\n| `summarizeDiagnosticsArtifacts` | function: function summarizeDiagnosticsArtifacts(inputs = []) | inputs = [] | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { summarizeDiagnosticsArtifacts } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:1824` |\n| `summarizeLifecycleObservability` | function: function summarizeLifecycleObservability({ events = [], logPath = \"\", artifactScanDurationMs = 0, artifactUploadDurationMs = 0, totalBytes = 0, fileCount = 0, } = {}) | { events = [], logPath = \"\", artifactScanDurationMs = 0, artifactUploadDurationMs = 0, totalBytes = 0, fileCount = 0, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { summarizeLifecycleObservability } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:219` |\n| `summarizeProcessSamples` | function: function summarizeProcessSamples({ samples = [], requestedParallelism = 0, command = \"\", args = [], env = process.env, activeCpuThreshold = 0.1, } = {}) | { samples = [], requestedParallelism = 0, command = \"\", args = [], env = process.env, activeCpuThreshold = 0.1, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { summarizeProcessSamples } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:1254` |\n| `SURFACE_TIMESTAMP_POLICY_CONTRACT` | constant: const SURFACE_TIMESTAMP_POLICY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { SURFACE_TIMESTAMP_POLICY_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/surface-manifest.js:1` |\n| `testKfdAgentHub` | function: function testKfdAgentHub({ cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, outputDir = KFD_AGENT_HUB_OUTPUT_DIR, kfdRoot = \"\", run = defaultRun } = {}) | { cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, outputDir = KFD_AGENT_HUB_OUTPUT_DIR, kfdRoot = \"\", run = defaultRun } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { testKfdAgentHub } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-agent-hub.js:399` |\n| `transitionReleaseTransaction` | function: function transitionReleaseTransaction(record, nextState, metadata = {}) | record, nextState, metadata = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { transitionReleaseTransaction } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publish-transaction.js:256` |\n| `truncateUtf8` | function: function truncateUtf8(text, maxBytes = DEFAULT_MAX_BODY_BYTES) | text, maxBytes = DEFAULT_MAX_BODY_BYTES | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { truncateUtf8 } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:84` |\n| `updateBadgeBundleBlock` | function: function updateBadgeBundleBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { updateBadgeBundleBlock } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:887` |\n| `updateConfiguredVersionStateContents` | function: function updateConfiguredVersionStateContents(files, version) | files, version | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { updateConfiguredVersionStateContents } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:1680` |\n| `updateHomebrewTap` | function: async function updateHomebrewTap({ cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", write = true, } = {}) | { cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", write = true, } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { updateHomebrewTap } from \"@kungfu-tech/buildchain/core\";` | `packages/core/homebrew.js:390` |\n| `updateReadmeBadgeBlock` | function: function updateReadmeBadgeBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { updateReadmeBadgeBlock } from \"@kungfu-tech/buildchain/core\";` | `packages/core/readme-badges.js:874` |\n| `validateAnchoredPackageRelease` | function: function validateAnchoredPackageRelease({ cwd = process.cwd(), requireManifest = true, requirePackageSetOrder = \"platforms-first-main-last\", requireTrustedPublishing = true, requireLifecycleStages = [\"install\", \"build\", \"verify\", \"publish\"], requirePublishGateSourceLock = false, publishSource = undefined, env = process.env, } = {}) | { cwd = process.cwd(), requireManifest = true, requirePackageSetOrder = \"platforms-first-main-last\", requireTrustedPublishing = true, requireLifecycleStages = [\"install\", \"build\", \"verify\", \"publish\"], requirePublishGateSourceLock = false, publishSource = undefined, env = process.env, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateAnchoredPackageRelease } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:325` |\n| `validateArtifactSigningReceipt` | function: function validateArtifactSigningReceipt(receipt, { request } = {}) | receipt, { request } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateArtifactSigningReceipt } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing.js:374` |\n| `validateArtifactSigningRequest` | function: function validateArtifactSigningRequest(request) | request | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateArtifactSigningRequest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing.js:291` |\n| `validateArtifactSigningResult` | function: function validateArtifactSigningResult(result, { request, receipt } = {}) | result, { request, receipt } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateArtifactSigningResult } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing-result.js:147` |\n| `validateBuildchainConfig` | function: function validateBuildchainConfig(cwd = process.cwd(), { requireConfig = true, requireVersionState = false, requireLifecycleStages = [], } = {}) | cwd = process.cwd(), { requireConfig = true, requireVersionState = false, requireLifecycleStages = [], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateBuildchainConfig } from \"@kungfu-tech/buildchain/core\";` | `packages/core/buildchain-config.js:1547` |\n| `validateControllerPlan` | function: function validateControllerPlan(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateControllerPlan } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:324` |\n| `validateControllerReceipt` | function: function validateControllerReceipt(receipt, { plan = undefined, expectedSourceSha = \"\", expectedRuntimeSha = \"\", expectedPlanDigest = \"\", } = {}) | receipt, { plan = undefined, expectedSourceSha = \"\", expectedRuntimeSha = \"\", expectedPlanDigest = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateControllerReceipt } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:422` |\n| `validateControllerReceiptReference` | function: function validateControllerReceiptReference(reference, { expectedSourceSha = \"\", acceptedSourceShas = [], expectedRuntimeSha = \"\", requirePassed = false, } = {}) | reference, { expectedSourceSha = \"\", acceptedSourceShas = [], expectedRuntimeSha = \"\", requirePassed = false, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateControllerReceiptReference } from \"@kungfu-tech/buildchain/core\";` | `packages/core/controller-evidence.js:504` |\n| `validateKfd1ReleaseGateEvidence` | function: function validateKfd1ReleaseGateEvidence(section, { metadata = resolveKfd1Metadata() } = {}) | section, { metadata = resolveKfd1Metadata() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfd1ReleaseGateEvidence } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:1337` |\n| `validateKfd2ProductClaimsRegistry` | function: function validateKfd2ProductClaimsRegistry(registry = {}) | registry = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateKfd2ProductClaimsRegistry } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd2-product-claims.js:152` |\n| `validateKfd3CollaborationInterfaceReleaseGateEvidence` | function: function validateKfd3CollaborationInterfaceReleaseGateEvidence(section, { metadata = resolveKfd3Metadata() } = {}) | section, { metadata = resolveKfd3Metadata() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfd3CollaborationInterfaceReleaseGateEvidence } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-gate.js:1470` |\n| `validateKfdProductGateResult` | function: function validateKfdProductGateResult(result, { expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {}) | result, { expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfdProductGateResult } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:565` |\n| `validateKfdSupportProjection` | function: function validateKfdSupportProjection(projection, { expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {}) | projection, { expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfdSupportProjection } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:796` |\n| `validateKnownReleasePassportContracts` | function: function validateKnownReleasePassportContracts() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKnownReleasePassportContracts } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:2853` |\n| `validatePackageManagerContract` | function: function validatePackageManagerContract({ cwd = process.cwd(), expectedManager = \"\" } = {}) | { cwd = process.cwd(), expectedManager = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validatePackageManagerContract } from \"@kungfu-tech/buildchain/core\";` | `packages/core/package-manager.js:18` |\n| `validatePublishEvidence` | function: function validatePublishEvidence({ evidence, version, channel, sourceSha, releaseSha, targetRef = \"\", releaseMaterialSha = releaseSha, publishToolingSha = \"\", requiredArtifacts = [], } = {}) | { evidence, version, channel, sourceSha, releaseSha, targetRef = \"\", releaseMaterialSha = releaseSha, publishToolingSha = \"\", requiredArtifacts = [], } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validatePublishEvidence } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publish-transaction.js:674` |\n| `validateReleaseActivationReceiptSet` | function: function validateReleaseActivationReceiptSet(receiptSet, { allowShadow = true } = {}) | receiptSet, { allowShadow = true } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateReleaseActivationReceiptSet } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-activation-transaction.js:376` |\n| `validateReleaseActivationTransaction` | function: function validateReleaseActivationTransaction(transaction) | transaction | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateReleaseActivationTransaction } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-activation-transaction.js:146` |\n| `validateReleaseCandidatePassport` | function: function validateReleaseCandidatePassport({ passport, repository = \"\", targetChannel = \"\", version = \"\", sourceHeadSha = \"\", buildSummary = undefined, requirePlatforms = true, requireFamilyEvidence = false, familyEvidenceRoot = \"\", familyInitiativeId = \"\", familyAssignmentId = \"\", } = {}) | { passport, repository = \"\", targetChannel = \"\", version = \"\", sourceHeadSha = \"\", buildSummary = undefined, requirePlatforms = true, requireFamilyEvidence = false, familyEvidenceRoot = \"\", familyInitiativeId = \"\", familyAssignmentId = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateReleaseCandidatePassport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-candidate.js:404` |\n| `validateReleasePassportSchema` | function: function validateReleasePassportSchema(passport) | passport | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateReleasePassportSchema } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport-contract.js:256` |\n| `verifyArtifactPassport` | function: async function verifyArtifactPassport({ subject, cwd = process.cwd(), passportLocation = \"\", locatorConfig = \"\", repository = \"\", tag = \"\", githubReleaseBaseUrl = \"\", subjectDigest = \"\", subjectKind = \"\", npmRegistryBaseUrl = \"\", verificationEnvelope = undefined, } = {}) | { subject, cwd = process.cwd(), passportLocation = \"\", locatorConfig = \"\", repository = \"\", tag = \"\", githubReleaseBaseUrl = \"\", subjectDigest = \"\", subjectKind = \"\", npmRegistryBaseUrl = \"\", verificationEnvelope = undefined, } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyArtifactPassport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-passport.js:701` |\n| `verifyArtifactSigningResultFiles` | function: function verifyArtifactSigningResultFiles({ root, request, receipt, result, } = {}) | { root, request, receipt, result, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyArtifactSigningResultFiles } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-signing-result.js:193` |\n| `verifyArtifactVerificationEnvelope` | function: function verifyArtifactVerificationEnvelope({ envelope, assessmentTime = Math.floor(Date.now() / 1000), expectedEnvelopeRoot = \"\", expectedIssuer = \"\", expectedPublisher = \"\", expectedContractVersion = \"\", } = {}) | { envelope, assessmentTime = Math.floor(Date.now() / 1000), expectedEnvelopeRoot = \"\", expectedIssuer = \"\", expectedPublisher = \"\", expectedContractVersion = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyArtifactVerificationEnvelope } from \"@kungfu-tech/buildchain/core\";` | `packages/core/artifact-verification-envelope.js:144` |\n| `verifyBuildchainLogEvents` | function: function verifyBuildchainLogEvents({ path: filePath = \"\", events: inputEvents = undefined, minEvents = 1, allowErrors = false, requirePhases = [], requireComponents = [], requireEvents = [], } = {}) | { path: filePath = \"\", events: inputEvents = undefined, minEvents = 1, allowErrors = false, requirePhases = [], requireComponents = [], requireEvents = [], } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyBuildchainLogEvents } from \"@kungfu-tech/buildchain/core\";` | `packages/core/logging.js:230` |\n| `verifyBuildFacts` | function: function verifyBuildFacts({ cwd = process.cwd(), fact, factPath = \"\" } = {}) | { cwd = process.cwd(), fact, factPath = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyBuildFacts } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:423` |\n| `verifyCacheEvidenceSet` | function: function verifyCacheEvidenceSet(receipt) | receipt | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyCacheEvidenceSet } from \"@kungfu-tech/buildchain/core\";` | `packages/core/cache-evidence.js:273` |\n| `verifyCacheOperationReceipt` | function: function verifyCacheOperationReceipt(receipt) | receipt | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyCacheOperationReceipt } from \"@kungfu-tech/buildchain/core\";` | `packages/core/cache-evidence.js:226` |\n| `verifyDetachedArtifactSignature` | function: function verifyDetachedArtifactSignature({ request, envelope, publicKey, } = {}) | { request, envelope, publicKey, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyDetachedArtifactSignature } from \"@kungfu-tech/buildchain/core\";` | `packages/core/detached-artifact-signature.js:82` |\n| `verifyGitHubArtifactAttestationEvidence` | function: function verifyGitHubArtifactAttestationEvidence({ artifactPath, platformManifestPath, releasePassportPath, bundlePath, evidence, verificationResults, } = {}) | { artifactPath, platformManifestPath, releasePassportPath, bundlePath, evidence, verificationResults, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyGitHubArtifactAttestationEvidence } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-artifact-attestation.js:563` |\n| `verifyGithubGovernanceReceipt` | function: function verifyGithubGovernanceReceipt(receipt, { expectedOrganization, expectedRepository, expectedRepositoryIdentityRoot, expectedTargetRef, expectedPolicyRoot, expectedVerifierSourceRevision, now = new Date().toISOString(), } = {}) | receipt, { expectedOrganization, expectedRepository, expectedRepositoryIdentityRoot, expectedTargetRef, expectedPolicyRoot, expectedVerifierSourceRevision, now = new Date().toISOString(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyGithubGovernanceReceipt } from \"@kungfu-tech/buildchain/core\";` | `packages/core/github-governance-authority.js:884` |\n| `verifyKfdRecord` | function: async function verifyKfdRecord(record) | record | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyKfdRecord } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd-product-gates.js:308` |\n| `verifyPortableDevCachePlan` | function: function verifyPortableDevCachePlan(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyPortableDevCachePlan } from \"@kungfu-tech/buildchain/core\";` | `packages/core/portable-dev-cache.js:211` |\n| `verifyPublicationAdmission` | function: function verifyPublicationAdmission({ admission, registry, runnerProvenance, controlPlaneAudit, publicationEvidence, expected = {}, usedNonces = [], now = new Date(), } = {}) | { admission, registry, runnerProvenance, controlPlaneAudit, publicationEvidence, expected = {}, usedNonces = [], now = new Date(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyPublicationAdmission } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:791` |\n| `verifyPublicationQualificationReceipt` | function: function verifyPublicationQualificationReceipt({ receipt, capability, gateAggregate, expected = {}, usedNonces = [], now = new Date(), } = {}) | { receipt, capability, gateAggregate, expected = {}, usedNonces = [], now = new Date(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyPublicationQualificationReceipt } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-authority.js:1096` |\n| `verifyPublicationReproducibility` | function: function verifyPublicationReproducibility({ cwd = process.cwd(), sourceSha = \"\", output = DEFAULT_OUTPUT, promote = false, keepWorkspaces = false, pullToolchain = true, packageName = \"\", allowUnpinnedToolchain = false, overlayPaths = [DEFAULT_REGISTRY_INPUT_DIR, DEFAULT_REGISTRY_HYDRATION], } = {}) | { cwd = process.cwd(), sourceSha = \"\", output = DEFAULT_OUTPUT, promote = false, keepWorkspaces = false, pullToolchain = true, packageName = \"\", allowUnpinnedToolchain = false, overlayPaths = [DEFAULT_REGISTRY_INPUT_DIR, DEFAULT_REGISTRY_HYDRATION], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { verifyPublicationReproducibility } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-reproducibility.js:869` |\n| `verifyPublicationSealedBundle` | function: function verifyPublicationSealedBundle({ bundleRoot, manifest } = {}) | { bundleRoot, manifest } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyPublicationSealedBundle } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-sealed-bundle.js:124` |\n| `verifyReleasePassport` | function: async function verifyReleasePassport({ passportLocation, artifactEvidenceLocation = \"\", publishEvidenceLocation = \"\", impactLocation = \"\", agentIndexLocation = \"\", productMechanismLocation = \"\", kfdAgentHubEvidenceLocation = \"\", kfdSupportEvidenceLocation = \"\", checkedAt = nowIso(), } = {}) | { passportLocation, artifactEvidenceLocation = \"\", publishEvidenceLocation = \"\", impactLocation = \"\", agentIndexLocation = \"\", productMechanismLocation = \"\", kfdAgentHubEvidenceLocation = \"\", kfdSupportEvidenceLocation = \"\", checkedAt = nowIso(), } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyReleasePassport } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-passport.js:2743` |\n| `verifyReleasePropagationWork` | function: function verifyReleasePropagationWork(input) | input | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyReleasePropagationWork } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation-work.js:486` |\n| `WEB_SURFACE_PRODUCTION_DECISION_CONTRACT` | constant: const WEB_SURFACE_PRODUCTION_DECISION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { WEB_SURFACE_PRODUCTION_DECISION_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/web-surface-publication-candidate.js:7` |\n| `WEB_SURFACE_PUBLICATION_CANDIDATE_CONTRACT` | constant: const WEB_SURFACE_PUBLICATION_CANDIDATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { WEB_SURFACE_PUBLICATION_CANDIDATE_CONTRACT } from \"@kungfu-tech/buildchain/core\";` | `packages/core/web-surface-publication-candidate.js:5` |\n| `webSurfacePublicationDigest` | function: function webSurfacePublicationDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { webSurfacePublicationDigest } from \"@kungfu-tech/buildchain/core\";` | `packages/core/web-surface-publication-candidate.js:21` |\n| `workflowFrictionMarker` | function: function workflowFrictionMarker(fingerprint) | fingerprint | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { workflowFrictionMarker } from \"@kungfu-tech/buildchain/core\";` | `packages/core/issue-reporting.js:80` |\n| `writeBuildFacts` | function: function writeBuildFacts({ cwd = process.cwd(), fact, output = \"\" } = {}) | { cwd = process.cwd(), fact, output = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { writeBuildFacts } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:549` |\n| `writeDiagnosticsArtifact` | function: function writeDiagnosticsArtifact(filePath, diagnostics) | filePath, diagnostics | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { writeDiagnosticsArtifact } from \"@kungfu-tech/buildchain/core\";` | `packages/core/diagnostics.js:1459` |\n| `writeKfd2ProductClaimOutputs` | function: function writeKfd2ProductClaimOutputs(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { writeKfd2ProductClaimOutputs } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd2-product-claims.js:426` |\n| `writeKfd3SurfaceRegistry` | function: function writeKfd3SurfaceRegistry({ cwd = process.cwd(), registryPath = \"\", registry }) | { cwd = process.cwd(), registryPath = \"\", registry } | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { writeKfd3SurfaceRegistry } from \"@kungfu-tech/buildchain/core\";` | `packages/core/kfd3-surface-register.js:478` |\n| `writeKungfuBuildInfoProjection` | function: function writeKungfuBuildInfoProjection({ cwd = process.cwd(), moduleFact, output } = {}) | { cwd = process.cwd(), moduleFact, output } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { writeKungfuBuildInfoProjection } from \"@kungfu-tech/buildchain/core\";` | `packages/core/build-facts.js:557` |\n| `writePaperFleetUpdate` | function: function writePaperFleetUpdate(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { writePaperFleetUpdate } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper-fleet.js:271` |\n| `writePaperMigration` | function: function writePaperMigration(plan) | plan | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { writePaperMigration } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:1129` |\n| `writePaperScaffold` | function: function writePaperScaffold(plan) | plan | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { writePaperScaffold } from \"@kungfu-tech/buildchain/core\";` | `packages/core/paper.js:847` |\n| `writePublicationArtifact` | function: function writePublicationArtifact({ cwd = process.cwd(), output = \"\", passportOutput = \"\", registryOutput = \"\", registryInputs = [], sourceSha = \"\", sourceBundle = true, sourceBundlePath = \"\", generatedAt = \"\", } = {}) | { cwd = process.cwd(), output = \"\", passportOutput = \"\", registryOutput = \"\", registryInputs = [], sourceSha = \"\", sourceBundle = true, sourceBundlePath = \"\", generatedAt = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { writePublicationArtifact } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publication-artifact.js:598` |\n| `writeReleaseLineBootstrapVersionState` | function: function writeReleaseLineBootstrapVersionState({ cwd = process.cwd(), major, minor, sourceRef = \"\", initialVersion = \"\", runVersionStateLifecycle = true, generatedAt = \"\", } = {}) | { cwd = process.cwd(), major, minor, sourceRef = \"\", initialVersion = \"\", runVersionStateLifecycle = true, generatedAt = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { writeReleaseLineBootstrapVersionState } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-line-bootstrap.js:237` |\n| `writeReleasePropagationLock` | function: function writeReleasePropagationLock({ plan, target = \"\", cwd = process.cwd(), output = \"\" } = {}) | { plan, target = \"\", cwd = process.cwd(), output = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { writeReleasePropagationLock } from \"@kungfu-tech/buildchain/core\";` | `packages/core/release-propagation.js:317` |\n| `writeReleaseTransaction` | function: function writeReleaseTransaction(filePath, record) | filePath, record | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { writeReleaseTransaction } from \"@kungfu-tech/buildchain/core\";` | `packages/core/publish-transaction.js:376` |\n\n## `@kungfu-tech/buildchain/artifact-passport`\n\nTarget: `./packages/core/artifact-passport.js`. Public symbols: 10.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `ARTIFACT_PASSPORT_LOCATOR_CONTRACT` | constant: const ARTIFACT_PASSPORT_LOCATOR_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_PASSPORT_LOCATOR_CONTRACT } from \"@kungfu-tech/buildchain/artifact-passport\";` | `packages/core/artifact-passport.js:11` |\n| `ARTIFACT_PASSPORT_POINTER_CONTRACT` | constant: const ARTIFACT_PASSPORT_POINTER_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_PASSPORT_POINTER_CONTRACT } from \"@kungfu-tech/buildchain/artifact-passport\";` | `packages/core/artifact-passport.js:10` |\n| `ARTIFACT_VERIFICATION_CONTRACT` | constant: const ARTIFACT_VERIFICATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_VERIFICATION_CONTRACT } from \"@kungfu-tech/buildchain/artifact-passport\";` | `packages/core/artifact-passport.js:9` |\n| `DEFAULT_NPM_REGISTRY_BASE_URL` | constant: const DEFAULT_NPM_REGISTRY_BASE_URL | none | value | Import does not declare a throw contract. | none-on-import | `import { DEFAULT_NPM_REGISTRY_BASE_URL } from \"@kungfu-tech/buildchain/artifact-passport\";` | `packages/core/artifact-passport.js:12` |\n| `discoverArtifactPassport` | function: async function discoverArtifactPassport({ subject, cwd = process.cwd(), passportLocation = \"\", locatorConfig = \"\", repository = \"\", tag = \"\", githubReleaseBaseUrl = \"\", } = {}) | { subject, cwd = process.cwd(), passportLocation = \"\", locatorConfig = \"\", repository = \"\", tag = \"\", githubReleaseBaseUrl = \"\", } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { discoverArtifactPassport } from \"@kungfu-tech/buildchain/artifact-passport\";` | `packages/core/artifact-passport.js:499` |\n| `explainArtifactPassport` | function: async function explainArtifactPassport(options = {}) | options = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { explainArtifactPassport } from \"@kungfu-tech/buildchain/artifact-passport\";` | `packages/core/artifact-passport.js:827` |\n| `resolveArtifactSubject` | function: async function resolveArtifactSubject(subject, { cwd = process.cwd(), subjectDigest = \"\", subjectKind = \"\", npmRegistryBaseUrl = \"\", } = {}) | subject, { cwd = process.cwd(), subjectDigest = \"\", subjectKind = \"\", npmRegistryBaseUrl = \"\", } = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveArtifactSubject } from \"@kungfu-tech/buildchain/artifact-passport\";` | `packages/core/artifact-passport.js:368` |\n| `sha512IntegrityBuffer` | function: function sha512IntegrityBuffer(buffer) | buffer | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { sha512IntegrityBuffer } from \"@kungfu-tech/buildchain/artifact-passport\";` | `packages/core/artifact-passport.js:34` |\n| `sha512IntegrityFile` | function: function sha512IntegrityFile(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sha512IntegrityFile } from \"@kungfu-tech/buildchain/artifact-passport\";` | `packages/core/artifact-passport.js:38` |\n| `verifyArtifactPassport` | function: async function verifyArtifactPassport({ subject, cwd = process.cwd(), passportLocation = \"\", locatorConfig = \"\", repository = \"\", tag = \"\", githubReleaseBaseUrl = \"\", subjectDigest = \"\", subjectKind = \"\", npmRegistryBaseUrl = \"\", verificationEnvelope = undefined, } = {}) | { subject, cwd = process.cwd(), passportLocation = \"\", locatorConfig = \"\", repository = \"\", tag = \"\", githubReleaseBaseUrl = \"\", subjectDigest = \"\", subjectKind = \"\", npmRegistryBaseUrl = \"\", verificationEnvelope = undefined, } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyArtifactPassport } from \"@kungfu-tech/buildchain/artifact-passport\";` | `packages/core/artifact-passport.js:701` |\n\n## `@kungfu-tech/buildchain/artifact-verification-envelope`\n\nTarget: `./packages/core/artifact-verification-envelope.js`. Public symbols: 7.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `ARTIFACT_VERIFICATION_ENVELOPE_CHECK_CONTRACT` | constant: const ARTIFACT_VERIFICATION_ENVELOPE_CHECK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_VERIFICATION_ENVELOPE_CHECK_CONTRACT } from \"@kungfu-tech/buildchain/artifact-verification-envelope\";` | `packages/core/artifact-verification-envelope.js:5` |\n| `ARTIFACT_VERIFICATION_ENVELOPE_CONTRACT` | constant: const ARTIFACT_VERIFICATION_ENVELOPE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_VERIFICATION_ENVELOPE_CONTRACT } from \"@kungfu-tech/buildchain/artifact-verification-envelope\";` | `packages/core/artifact-verification-envelope.js:3` |\n| `artifactVerificationEnvelopeDigest` | function: function artifactVerificationEnvelopeDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { artifactVerificationEnvelopeDigest } from \"@kungfu-tech/buildchain/artifact-verification-envelope\";` | `packages/core/artifact-verification-envelope.js:50` |\n| `KFX_ADMISSION_INPUTS_CONTRACT` | constant: const KFX_ADMISSION_INPUTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFX_ADMISSION_INPUTS_CONTRACT } from \"@kungfu-tech/buildchain/artifact-verification-envelope\";` | `packages/core/artifact-verification-envelope.js:7` |\n| `projectArtifactVerificationEnvelopeToKfx` | function: function projectArtifactVerificationEnvelopeToKfx({ envelope, assessmentTime = Math.floor(Date.now() / 1000), expectedEnvelopeRoot = \"\", expectedIssuer = \"\", expectedPublisher = \"\", expectedContractVersion = \"\", } = {}) | { envelope, assessmentTime = Math.floor(Date.now() / 1000), expectedEnvelopeRoot = \"\", expectedIssuer = \"\", expectedPublisher = \"\", expectedContractVersion = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { projectArtifactVerificationEnvelopeToKfx } from \"@kungfu-tech/buildchain/artifact-verification-envelope\";` | `packages/core/artifact-verification-envelope.js:359` |\n| `sealArtifactVerificationReport` | function: function sealArtifactVerificationReport({ report, bindings, kfdAssessment, issuedAt, expiresAt, revocation, } = {}) | { report, bindings, kfdAssessment, issuedAt, expiresAt, revocation, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sealArtifactVerificationReport } from \"@kungfu-tech/buildchain/artifact-verification-envelope\";` | `packages/core/artifact-verification-envelope.js:314` |\n| `verifyArtifactVerificationEnvelope` | function: function verifyArtifactVerificationEnvelope({ envelope, assessmentTime = Math.floor(Date.now() / 1000), expectedEnvelopeRoot = \"\", expectedIssuer = \"\", expectedPublisher = \"\", expectedContractVersion = \"\", } = {}) | { envelope, assessmentTime = Math.floor(Date.now() / 1000), expectedEnvelopeRoot = \"\", expectedIssuer = \"\", expectedPublisher = \"\", expectedContractVersion = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyArtifactVerificationEnvelope } from \"@kungfu-tech/buildchain/artifact-verification-envelope\";` | `packages/core/artifact-verification-envelope.js:144` |\n\n## `@kungfu-tech/buildchain/github-artifact-attestation`\n\nTarget: `./packages/core/github-artifact-attestation.js`. Public symbols: 18.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `createGitHubArtifactAttestationEvidence` | function: function createGitHubArtifactAttestationEvidence({ preparation, attestationId, attestationUrl, bundlePath, workflow = {}, } = {}) | { preparation, attestationId, attestationUrl, bundlePath, workflow = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createGitHubArtifactAttestationEvidence } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:474` |\n| `createGitHubArtifactAttestationPolicy` | function: function createGitHubArtifactAttestationPolicy(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGitHubArtifactAttestationPolicy } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:204` |\n| `createGitHubArtifactAttestationVerificationPlan` | function: function createGitHubArtifactAttestationVerificationPlan({ artifactPath, bundlePath, evidence, } = {}) | { artifactPath, bundlePath, evidence, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGitHubArtifactAttestationVerificationPlan } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:524` |\n| `GITHUB_ARTIFACT_ATTESTATION_EVIDENCE_CONTRACT` | constant: const GITHUB_ARTIFACT_ATTESTATION_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_EVIDENCE_CONTRACT } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:9` |\n| `GITHUB_ARTIFACT_ATTESTATION_POLICY_CONTRACT` | constant: const GITHUB_ARTIFACT_ATTESTATION_POLICY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_POLICY_CONTRACT } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:5` |\n| `GITHUB_ARTIFACT_ATTESTATION_PREDICATE_CONTRACT` | constant: const GITHUB_ARTIFACT_ATTESTATION_PREDICATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_PREDICATE_CONTRACT } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:7` |\n| `GITHUB_ARTIFACT_ATTESTATION_PREDICATE_TYPE` | constant: const GITHUB_ARTIFACT_ATTESTATION_PREDICATE_TYPE | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_PREDICATE_TYPE } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:13` |\n| `GITHUB_ARTIFACT_ATTESTATION_VERIFICATION_CONTRACT` | constant: const GITHUB_ARTIFACT_ATTESTATION_VERIFICATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_VERIFICATION_CONTRACT } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:11` |\n| `GITHUB_ARTIFACT_ATTESTATION_WORKFLOW` | constant: const GITHUB_ARTIFACT_ATTESTATION_WORKFLOW | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_ARTIFACT_ATTESTATION_WORKFLOW } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:15` |\n| `githubArtifactAttestationRequiredPermissions` | function: function githubArtifactAttestationRequiredPermissions() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { githubArtifactAttestationRequiredPermissions } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:640` |\n| `githubArtifactAttestationSemanticRoot` | function: function githubArtifactAttestationSemanticRoot(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { githubArtifactAttestationSemanticRoot } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:91` |\n| `githubArtifactAttestationSha256Buffer` | function: function githubArtifactAttestationSha256Buffer(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { githubArtifactAttestationSha256Buffer } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:83` |\n| `githubArtifactAttestationSha256File` | function: function githubArtifactAttestationSha256File(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { githubArtifactAttestationSha256File } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:87` |\n| `normalizeGitHubArtifactAttestationPolicy` | function: function normalizeGitHubArtifactAttestationPolicy(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeGitHubArtifactAttestationPolicy } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:158` |\n| `prepareGitHubArtifactAttestation` | function: function prepareGitHubArtifactAttestation({ subjectPath, platformManifestPath, releasePassportPath, policy, expectedBuildchainRef = \"\", expectedCallerRepository = \"\", expectedSourceSha = \"\", } = {}) | { subjectPath, platformManifestPath, releasePassportPath, policy, expectedBuildchainRef = \"\", expectedCallerRepository = \"\", expectedSourceSha = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { prepareGitHubArtifactAttestation } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:250` |\n| `stableJson` | function: function stableJson(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { stableJson } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:72` |\n| `stageGitHubArtifactAttestationInputs` | function: function stageGitHubArtifactAttestationInputs({ policy, subjectRoots = [], platformManifestPaths = [], releasePassportPath, outputDir = \".buildchain/github-artifact-attestation-input\", } = {}) | { policy, subjectRoots = [], platformManifestPaths = [], releasePassportPath, outputDir = \".buildchain/github-artifact-attestation-input\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { stageGitHubArtifactAttestationInputs } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:389` |\n| `verifyGitHubArtifactAttestationEvidence` | function: function verifyGitHubArtifactAttestationEvidence({ artifactPath, platformManifestPath, releasePassportPath, bundlePath, evidence, verificationResults, } = {}) | { artifactPath, platformManifestPath, releasePassportPath, bundlePath, evidence, verificationResults, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyGitHubArtifactAttestationEvidence } from \"@kungfu-tech/buildchain/github-artifact-attestation\";` | `packages/core/github-artifact-attestation.js:563` |\n\n## `@kungfu-tech/buildchain/artifact-signing`\n\nTarget: `./packages/core/artifact-signing.js`. Public symbols: 10.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `ARTIFACT_SIGNING_AUTHORITY_CONTRACT` | constant: const ARTIFACT_SIGNING_AUTHORITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_SIGNING_AUTHORITY_CONTRACT } from \"@kungfu-tech/buildchain/artifact-signing\";` | `packages/core/artifact-signing.js:7` |\n| `ARTIFACT_SIGNING_RECEIPT_CONTRACT` | constant: const ARTIFACT_SIGNING_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_SIGNING_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/artifact-signing\";` | `packages/core/artifact-signing.js:5` |\n| `ARTIFACT_SIGNING_REQUEST_CONTRACT` | constant: const ARTIFACT_SIGNING_REQUEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_SIGNING_REQUEST_CONTRACT } from \"@kungfu-tech/buildchain/artifact-signing\";` | `packages/core/artifact-signing.js:3` |\n| `artifactSigningDigest` | function: function artifactSigningDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { artifactSigningDigest } from \"@kungfu-tech/buildchain/artifact-signing\";` | `packages/core/artifact-signing.js:60` |\n| `createArtifactSigningReceipt` | function: function createArtifactSigningReceipt({ request, status = \"passed\", authority = {}, result = {}, signatures = [], reason = \"\", } = {}) | { request, status = \"passed\", authority = {}, result = {}, signatures = [], reason = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createArtifactSigningReceipt } from \"@kungfu-tech/buildchain/artifact-signing\";` | `packages/core/artifact-signing.js:313` |\n| `createArtifactSigningRequest` | function: function createArtifactSigningRequest({ source = {}, runtime = {}, artifact = {}, signature = {}, delivery = {}, } = {}) | { source = {}, runtime = {}, artifact = {}, signature = {}, delivery = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createArtifactSigningRequest } from \"@kungfu-tech/buildchain/artifact-signing\";` | `packages/core/artifact-signing.js:167` |\n| `listArtifactSigningProfiles` | function: function listArtifactSigningProfiles() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { listArtifactSigningProfiles } from \"@kungfu-tech/buildchain/artifact-signing\";` | `packages/core/artifact-signing.js:103` |\n| `resolveArtifactSigningProfile` | function: function resolveArtifactSigningProfile({ profile = \"auto\", platform = \"\", artifactKind = \"binary\", } = {}) | { profile = \"auto\", platform = \"\", artifactKind = \"binary\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveArtifactSigningProfile } from \"@kungfu-tech/buildchain/artifact-signing\";` | `packages/core/artifact-signing.js:111` |\n| `validateArtifactSigningReceipt` | function: function validateArtifactSigningReceipt(receipt, { request } = {}) | receipt, { request } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateArtifactSigningReceipt } from \"@kungfu-tech/buildchain/artifact-signing\";` | `packages/core/artifact-signing.js:374` |\n| `validateArtifactSigningRequest` | function: function validateArtifactSigningRequest(request) | request | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateArtifactSigningRequest } from \"@kungfu-tech/buildchain/artifact-signing\";` | `packages/core/artifact-signing.js:291` |\n\n## `@kungfu-tech/buildchain/artifact-signing-result`\n\nTarget: `./packages/core/artifact-signing-result.js`. Public symbols: 5.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `ARTIFACT_SIGNING_RESULT_CONTRACT` | constant: const ARTIFACT_SIGNING_RESULT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_SIGNING_RESULT_CONTRACT } from \"@kungfu-tech/buildchain/artifact-signing-result\";` | `packages/core/artifact-signing-result.js:12` |\n| `artifactSigningEvidenceDigest` | function: function artifactSigningEvidenceDigest(evidence = []) | evidence = [] | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { artifactSigningEvidenceDigest } from \"@kungfu-tech/buildchain/artifact-signing-result\";` | `packages/core/artifact-signing-result.js:58` |\n| `createArtifactSigningResult` | function: function createArtifactSigningResult({ request, receipt, receiptPath = \"receipt.json\", payload = {}, evidence = [], verification = {}, } = {}) | { request, receipt, receiptPath = \"receipt.json\", payload = {}, evidence = [], verification = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createArtifactSigningResult } from \"@kungfu-tech/buildchain/artifact-signing-result\";` | `packages/core/artifact-signing-result.js:68` |\n| `validateArtifactSigningResult` | function: function validateArtifactSigningResult(result, { request, receipt } = {}) | result, { request, receipt } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateArtifactSigningResult } from \"@kungfu-tech/buildchain/artifact-signing-result\";` | `packages/core/artifact-signing-result.js:147` |\n| `verifyArtifactSigningResultFiles` | function: function verifyArtifactSigningResultFiles({ root, request, receipt, result, } = {}) | { root, request, receipt, result, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyArtifactSigningResultFiles } from \"@kungfu-tech/buildchain/artifact-signing-result\";` | `packages/core/artifact-signing-result.js:193` |\n\n## `@kungfu-tech/buildchain/detached-artifact-signature`\n\nTarget: `./packages/core/detached-artifact-signature.js`. Public symbols: 3.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `DETACHED_ARTIFACT_SIGNATURE_CONTRACT` | constant: const DETACHED_ARTIFACT_SIGNATURE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { DETACHED_ARTIFACT_SIGNATURE_CONTRACT } from \"@kungfu-tech/buildchain/detached-artifact-signature\";` | `packages/core/detached-artifact-signature.js:10` |\n| `signDetachedArtifactRequest` | function: function signDetachedArtifactRequest({ request, privateKey, keyId, authority = {}, } = {}) | { request, privateKey, keyId, authority = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { signDetachedArtifactRequest } from \"@kungfu-tech/buildchain/detached-artifact-signature\";` | `packages/core/detached-artifact-signature.js:36` |\n| `verifyDetachedArtifactSignature` | function: function verifyDetachedArtifactSignature({ request, envelope, publicKey, } = {}) | { request, envelope, publicKey, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyDetachedArtifactSignature } from \"@kungfu-tech/buildchain/detached-artifact-signature\";` | `packages/core/detached-artifact-signature.js:82` |\n\n## `@kungfu-tech/buildchain/anchored-version-material`\n\nTarget: `./packages/core/anchored-version-material.js`. Public symbols: 2.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `ANCHORED_VERSION_MATERIAL_CONTRACT` | constant: const ANCHORED_VERSION_MATERIAL_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ANCHORED_VERSION_MATERIAL_CONTRACT } from \"@kungfu-tech/buildchain/anchored-version-material\";` | `packages/core/anchored-version-material.js:15` |\n| `createAnchoredVersionMaterialEvidence` | function: function createAnchoredVersionMaterialEvidence({ cwd = process.cwd(), targetChannel = \"\", targetRef = \"\", alphaRef = \"\", releaseRef = \"HEAD\", runLifecycle = true, } = {}) | { cwd = process.cwd(), targetChannel = \"\", targetRef = \"\", alphaRef = \"\", releaseRef = \"HEAD\", runLifecycle = true, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createAnchoredVersionMaterialEvidence } from \"@kungfu-tech/buildchain/anchored-version-material\";` | `packages/core/anchored-version-material.js:118` |\n\n## `@kungfu-tech/buildchain/buildchain-contract`\n\nTarget: `./packages/core/buildchain-contract.js`. Public symbols: 12.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `BUILDCHAIN_CONTRACT_LOCK` | constant: const BUILDCHAIN_CONTRACT_LOCK | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTRACT_LOCK } from \"@kungfu-tech/buildchain/buildchain-contract\";` | `packages/core/buildchain-contract.js:8` |\n| `BUILDCHAIN_RUNTIME_CONTRACT_WORLD` | constant: const BUILDCHAIN_RUNTIME_CONTRACT_WORLD | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_RUNTIME_CONTRACT_WORLD } from \"@kungfu-tech/buildchain/buildchain-contract\";` | `packages/core/buildchain-contract.js:7` |\n| `contractSummary` | function: function contractSummary(contractWorld, runtimeRef = \"\", runtimeSha = \"\") | contractWorld, runtimeRef = \"\", runtimeSha = \"\" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { contractSummary } from \"@kungfu-tech/buildchain/buildchain-contract\";` | `packages/core/buildchain-contract.js:945` |\n| `createBuildchainContractLock` | function: function createBuildchainContractLock({ buildchainRef = \"v3\", resolvedSha = \"\", contractWorld, compatibilityPolicy = DEFAULT_POLICY, acceptedAt = new Date().toISOString(), } = {}) | { buildchainRef = \"v3\", resolvedSha = \"\", contractWorld, compatibilityPolicy = DEFAULT_POLICY, acceptedAt = new Date().toISOString(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createBuildchainContractLock } from \"@kungfu-tech/buildchain/buildchain-contract\";` | `packages/core/buildchain-contract.js:787` |\n| `createBuildchainContractWorld` | function: function createBuildchainContractWorld({ root = process.cwd(), packageJson = undefined, controllerRegistry = undefined, } = {}) | { root = process.cwd(), packageJson = undefined, controllerRegistry = undefined, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainContractWorld } from \"@kungfu-tech/buildchain/buildchain-contract\";` | `packages/core/buildchain-contract.js:110` |\n| `evaluateBuildchainContractLock` | function: function evaluateBuildchainContractLock({ lock, current, runtimeRef = \"\", runtimeSha = \"\", runtimeClass = \"\", compatibilityPolicy = \"\", } = {}) | { lock, current, runtimeRef = \"\", runtimeSha = \"\", runtimeClass = \"\", compatibilityPolicy = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { evaluateBuildchainContractLock } from \"@kungfu-tech/buildchain/buildchain-contract\";` | `packages/core/buildchain-contract.js:853` |\n| `finalizeBuildchainContractWorld` | function: function finalizeBuildchainContractWorld(contractWorld) | contractWorld | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { finalizeBuildchainContractWorld } from \"@kungfu-tech/buildchain/buildchain-contract\";` | `packages/core/buildchain-contract.js:762` |\n| `readBuildchainContractLock` | function: function readBuildchainContractLock(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readBuildchainContractLock } from \"@kungfu-tech/buildchain/buildchain-contract\";` | `packages/core/buildchain-contract.js:838` |\n| `readBuildchainContractWorld` | function: function readBuildchainContractWorld(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readBuildchainContractWorld } from \"@kungfu-tech/buildchain/buildchain-contract\";` | `packages/core/buildchain-contract.js:818` |\n| `renderBuildchainContractDriftIssueBody` | function: function renderBuildchainContractDriftIssueBody({ repository = \"\", workflow = \"\", runUrl = \"\", lockPath = \"\", evaluation, } = {}) | { repository = \"\", workflow = \"\", runUrl = \"\", lockPath = \"\", evaluation, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { renderBuildchainContractDriftIssueBody } from \"@kungfu-tech/buildchain/buildchain-contract\";` | `packages/core/buildchain-contract.js:957` |\n| `sha256File` | function: function sha256File(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { sha256File } from \"@kungfu-tech/buildchain/buildchain-contract\";` | `packages/core/buildchain-contract.js:34` |\n| `sha256Json` | function: function sha256Json(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { sha256Json } from \"@kungfu-tech/buildchain/buildchain-contract\";` | `packages/core/buildchain-contract.js:30` |\n\n## `@kungfu-tech/buildchain/candidate-timeline`\n\nTarget: `./packages/core/candidate-timeline.js`. Public symbols: 5.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `BUILDCHAIN_CANDIDATE_TIMELINE_CONTRACT` | constant: const BUILDCHAIN_CANDIDATE_TIMELINE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CANDIDATE_TIMELINE_CONTRACT } from \"@kungfu-tech/buildchain/candidate-timeline\";` | `packages/core/candidate-timeline.js:1` |\n| `BUILDCHAIN_CANDIDATE_TIMELINE_EVENT_CONTRACT` | constant: const BUILDCHAIN_CANDIDATE_TIMELINE_EVENT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CANDIDATE_TIMELINE_EVENT_CONTRACT } from \"@kungfu-tech/buildchain/candidate-timeline\";` | `packages/core/candidate-timeline.js:3` |\n| `createCandidateTimeline` | function: function createCandidateTimeline({ candidate = {}, events = [], generatedAt, } = {}) | { candidate = {}, events = [], generatedAt, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createCandidateTimeline } from \"@kungfu-tech/buildchain/candidate-timeline\";` | `packages/core/candidate-timeline.js:381` |\n| `formatCandidateTimelineReport` | function: function formatCandidateTimelineReport(timeline) | timeline | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { formatCandidateTimelineReport } from \"@kungfu-tech/buildchain/candidate-timeline\";` | `packages/core/candidate-timeline.js:438` |\n| `normalizeCandidateTimelineEvent` | function: function normalizeCandidateTimelineEvent(input = {}) | input = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeCandidateTimelineEvent } from \"@kungfu-tech/buildchain/candidate-timeline\";` | `packages/core/candidate-timeline.js:74` |\n\n## `@kungfu-tech/buildchain/channel-candidate`\n\nTarget: `./packages/core/channel-candidate.js`. Public symbols: 3.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `CHANNEL_CANDIDATE_DECISION_SCHEMA` | constant: const CHANNEL_CANDIDATE_DECISION_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { CHANNEL_CANDIDATE_DECISION_SCHEMA } from \"@kungfu-tech/buildchain/channel-candidate\";` | `packages/core/channel-candidate.js:5` |\n| `channelCandidateSourceLockRef` | function: function channelCandidateSourceLockRef(targetBranch, sourceSha) | targetBranch, sourceSha | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { channelCandidateSourceLockRef } from \"@kungfu-tech/buildchain/channel-candidate\";` | `packages/core/channel-candidate.js:84` |\n| `decideChannelCandidate` | function: function decideChannelCandidate(input) | input | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { decideChannelCandidate } from \"@kungfu-tech/buildchain/channel-candidate\";` | `packages/core/channel-candidate.js:90` |\n\n## `@kungfu-tech/buildchain/cache-evidence`\n\nTarget: `./packages/core/cache-evidence.js`. Public symbols: 7.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `BUILDCHAIN_CACHE_EVIDENCE_SET_CONTRACT` | constant: const BUILDCHAIN_CACHE_EVIDENCE_SET_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CACHE_EVIDENCE_SET_CONTRACT } from \"@kungfu-tech/buildchain/cache-evidence\";` | `packages/core/cache-evidence.js:5` |\n| `BUILDCHAIN_CACHE_OPERATION_RECEIPT_CONTRACT` | constant: const BUILDCHAIN_CACHE_OPERATION_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CACHE_OPERATION_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/cache-evidence\";` | `packages/core/cache-evidence.js:3` |\n| `cacheEvidenceDigest` | function: function cacheEvidenceDigest(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { cacheEvidenceDigest } from \"@kungfu-tech/buildchain/cache-evidence\";` | `packages/core/cache-evidence.js:48` |\n| `createCacheEvidenceSet` | function: function createCacheEvidenceSet({ repository, sourceCommit, sourceTree = \"\", runtimeCommit = \"\", platform, operations = [], } = {}) | { repository, sourceCommit, sourceTree = \"\", runtimeCommit = \"\", platform, operations = [], } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createCacheEvidenceSet } from \"@kungfu-tech/buildchain/cache-evidence\";` | `packages/core/cache-evidence.js:244` |\n| `createCacheOperationReceipt` | function: function createCacheOperationReceipt({ operationId, operation, provider, producer, platform, cacheKey, cacheRoot, outcome, bindings = {}, metrics, evidence, } = {}) | { operationId, operation, provider, producer, platform, cacheKey, cacheRoot, outcome, bindings = {}, metrics, evidence, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createCacheOperationReceipt } from \"@kungfu-tech/buildchain/cache-evidence\";` | `packages/core/cache-evidence.js:169` |\n| `verifyCacheEvidenceSet` | function: function verifyCacheEvidenceSet(receipt) | receipt | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyCacheEvidenceSet } from \"@kungfu-tech/buildchain/cache-evidence\";` | `packages/core/cache-evidence.js:273` |\n| `verifyCacheOperationReceipt` | function: function verifyCacheOperationReceipt(receipt) | receipt | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyCacheOperationReceipt } from \"@kungfu-tech/buildchain/cache-evidence\";` | `packages/core/cache-evidence.js:226` |\n\n## `@kungfu-tech/buildchain/controller-evidence`\n\nTarget: `./packages/core/controller-evidence.js`. Public symbols: 14.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `aggregateControllerReceipts` | function: function aggregateControllerReceipts({ plans = [], receipts = [] } = {}) | { plans = [], receipts = [] } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { aggregateControllerReceipts } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:448` |\n| `BUILDCHAIN_CONTROLLER_AGGREGATE_CONTRACT` | constant: const BUILDCHAIN_CONTROLLER_AGGREGATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTROLLER_AGGREGATE_CONTRACT } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:6` |\n| `BUILDCHAIN_CONTROLLER_DESCRIPTOR_CONTRACT` | constant: const BUILDCHAIN_CONTROLLER_DESCRIPTOR_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTROLLER_DESCRIPTOR_CONTRACT } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:4` |\n| `BUILDCHAIN_CONTROLLER_EVIDENCE_CONTRACT` | constant: const BUILDCHAIN_CONTROLLER_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTROLLER_EVIDENCE_CONTRACT } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:3` |\n| `BUILDCHAIN_CONTROLLER_REGISTRY_CONTRACT` | constant: const BUILDCHAIN_CONTROLLER_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTROLLER_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:5` |\n| `controllerEvidenceDigest` | function: function controllerEvidenceDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { controllerEvidenceDigest } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:150` |\n| `createControllerPlan` | function: function createControllerPlan({ descriptor, source = {}, runtime = {}, inputs = {} } = {}) | { descriptor, source = {}, runtime = {}, inputs = {} } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createControllerPlan } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:286` |\n| `createControllerReceipt` | function: function createControllerReceipt({ plan, stages = [], evidence = [], reason = undefined, artifact = \"\" } = {}) | { plan, stages = [], evidence = [], reason = undefined, artifact = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createControllerReceipt } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:362` |\n| `createControllerReceiptReference` | function: function createControllerReceiptReference(receipt) | receipt | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createControllerReceiptReference } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:490` |\n| `createControllerRegistry` | function: function createControllerRegistry({ workflows = [] } = {}) | { workflows = [] } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createControllerRegistry } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:196` |\n| `normalizeControllerReceiptReferences` | function: function normalizeControllerReceiptReferences({ receipts = [], references = [], expectedSourceSha = \"\", acceptedSourceShas = [], expectedRuntimeSha = \"\", requirePassed = false, } = {}) | { receipts = [], references = [], expectedSourceSha = \"\", acceptedSourceShas = [], expectedRuntimeSha = \"\", requirePassed = false, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeControllerReceiptReferences } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:531` |\n| `validateControllerPlan` | function: function validateControllerPlan(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateControllerPlan } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:324` |\n| `validateControllerReceipt` | function: function validateControllerReceipt(receipt, { plan = undefined, expectedSourceSha = \"\", expectedRuntimeSha = \"\", expectedPlanDigest = \"\", } = {}) | receipt, { plan = undefined, expectedSourceSha = \"\", expectedRuntimeSha = \"\", expectedPlanDigest = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateControllerReceipt } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:422` |\n| `validateControllerReceiptReference` | function: function validateControllerReceiptReference(reference, { expectedSourceSha = \"\", acceptedSourceShas = [], expectedRuntimeSha = \"\", requirePassed = false, } = {}) | reference, { expectedSourceSha = \"\", acceptedSourceShas = [], expectedRuntimeSha = \"\", requirePassed = false, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateControllerReceiptReference } from \"@kungfu-tech/buildchain/controller-evidence\";` | `packages/core/controller-evidence.js:504` |\n\n## `@kungfu-tech/buildchain/diagnostics`\n\nTarget: `./packages/core/diagnostics.js`. Public symbols: 30.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `BUILDCHAIN_ANCHORED_PACKAGE_RELEASE_VALIDATION_CONTRACT` | constant: const BUILDCHAIN_ANCHORED_PACKAGE_RELEASE_VALIDATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_ANCHORED_PACKAGE_RELEASE_VALIDATION_CONTRACT } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:31` |\n| `BUILDCHAIN_DIAGNOSTICS_CONTRACT` | constant: const BUILDCHAIN_DIAGNOSTICS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_DIAGNOSTICS_CONTRACT } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:28` |\n| `BUILDCHAIN_DIAGNOSTICS_MANIFEST_CONTRACT` | constant: const BUILDCHAIN_DIAGNOSTICS_MANIFEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_DIAGNOSTICS_MANIFEST_CONTRACT } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:33` |\n| `BUILDCHAIN_DIAGNOSTICS_SUMMARY_CONTRACT` | constant: const BUILDCHAIN_DIAGNOSTICS_SUMMARY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_DIAGNOSTICS_SUMMARY_CONTRACT } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:35` |\n| `BUILDCHAIN_LIFECYCLE_OBSERVABILITY_CONTRACT` | constant: const BUILDCHAIN_LIFECYCLE_OBSERVABILITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LIFECYCLE_OBSERVABILITY_CONTRACT } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:29` |\n| `BUILDCHAIN_LOCKED_SOURCE_CHECKOUT_CONTRACT` | constant: const BUILDCHAIN_LOCKED_SOURCE_CHECKOUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LOCKED_SOURCE_CHECKOUT_CONTRACT } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:41` |\n| `BUILDCHAIN_PROCESS_SAMPLE_REPORT_CONTRACT` | constant: const BUILDCHAIN_PROCESS_SAMPLE_REPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_PROCESS_SAMPLE_REPORT_CONTRACT } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:37` |\n| `BUILDCHAIN_PROCESS_SAMPLE_SUMMARY_CONTRACT` | constant: const BUILDCHAIN_PROCESS_SAMPLE_SUMMARY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_PROCESS_SAMPLE_SUMMARY_CONTRACT } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:39` |\n| `classifyProcessCommand` | function: function classifyProcessCommand(command = \"\") | command = \"\" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { classifyProcessCommand } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:1085` |\n| `collectBuildchainDiagnostics` | function: function collectBuildchainDiagnostics({ cwd = process.cwd(), artifactPaths = [] } = {}) | { cwd = process.cwd(), artifactPaths = [] } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectBuildchainDiagnostics } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:248` |\n| `collectCacheDiagnostics` | function: function collectCacheDiagnostics({ cwd = process.cwd(), cacheDirs = [], runCommand = defaultDiagnosticCommandRunner } = {}) | { cwd = process.cwd(), cacheDirs = [], runCommand = defaultDiagnosticCommandRunner } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectCacheDiagnostics } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:922` |\n| `collectCompilerCacheDiagnostics` | function: function collectCompilerCacheDiagnostics({ cwd = process.cwd(), runCommand = defaultDiagnosticCommandRunner, env = process.env, } = {}) | { cwd = process.cwd(), runCommand = defaultDiagnosticCommandRunner, env = process.env, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectCompilerCacheDiagnostics } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:573` |\n| `collectGitDiagnostics` | function: function collectGitDiagnostics({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectGitDiagnostics } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:944` |\n| `collectNativeDiagnostics` | function: function collectNativeDiagnostics({ cwd = process.cwd(), profile = undefined, runCommand = defaultDiagnosticCommandRunner, } = {}) | { cwd = process.cwd(), profile = undefined, runCommand = defaultDiagnosticCommandRunner, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectNativeDiagnostics } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:295` |\n| `collectProcessTreeSnapshot` | function: function collectProcessTreeSnapshot({ rootPid = process.pid, cwd = process.cwd(), platform = process.platform, runCommand = defaultDiagnosticCommandRunner, } = {}) | { rootPid = process.pid, cwd = process.cwd(), platform = process.platform, runCommand = defaultDiagnosticCommandRunner, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectProcessTreeSnapshot } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:1029` |\n| `collectRunnerDiagnostics` | function: function collectRunnerDiagnostics() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectRunnerDiagnostics } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:468` |\n| `collectToolDiagnostics` | function: function collectToolDiagnostics({ cwd = process.cwd(), tools = [\"node\", \"pnpm\", \"npm\", \"git\", \"cmake\", \"ninja\", \"ccache\", \"sccache\"] } = {}) | { cwd = process.cwd(), tools = [\"node\", \"pnpm\", \"npm\", \"git\", \"cmake\", \"ninja\", \"ccache\", \"sccache\"] } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectToolDiagnostics } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:495` |\n| `createDiagnosticsArtifact` | function: function createDiagnosticsArtifact({ cwd = process.cwd(), logPath = \"\", artifactPaths = [], cacheDirs = [], lifecycleObservability = undefined, processSamples = [], processSummary = undefined, requestedParallelism = 0, sourceCheckout = undefined, compilerCachePreparation = undefined, links = {}, } = {}) | { cwd = process.cwd(), logPath = \"\", artifactPaths = [], cacheDirs = [], lifecycleObservability = undefined, processSamples = [], processSummary = undefined, requestedParallelism = 0, sourceCheckout = undefined, compilerCachePreparation = undefined, links = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createDiagnosticsArtifact } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:1408` |\n| `createStructuredCacheEvidence` | function: function createStructuredCacheEvidence({ sourceCheckout, compilerCaches, compilerCachePreparation, platform, env = process.env, }) | { sourceCheckout, compilerCaches, compilerCachePreparation, platform, env = process.env, } | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createStructuredCacheEvidence } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:722` |\n| `detectRequestedParallelism` | function: function detectRequestedParallelism({ command = \"\", args = [], env = process.env, } = {}) | { command = \"\", args = [], env = process.env, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { detectRequestedParallelism } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:1188` |\n| `detectRequestedParallelismFromProcessSamples` | function: function detectRequestedParallelismFromProcessSamples(samples = []) | samples = [] | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { detectRequestedParallelismFromProcessSamples } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:1223` |\n| `formatDiagnosticsSummaryTable` | function: function formatDiagnosticsSummaryTable(summary = {}) | summary = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { formatDiagnosticsSummaryTable } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:1786` |\n| `readDiagnosticsArtifact` | function: function readDiagnosticsArtifact(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readDiagnosticsArtifact } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:1468` |\n| `redactDiagnosticsValue` | function: function redactDiagnosticsValue(key, value, pattern = DEFAULT_SECRET_KEY_PATTERN) | key, value, pattern = DEFAULT_SECRET_KEY_PATTERN | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { redactDiagnosticsValue } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:953` |\n| `startProcessSampler` | function: function startProcessSampler({ rootPid = process.pid, intervalMs = 15000, label = \"\", command = \"\", args = [], env = process.env, requestedParallelism = 0, onSample = () => undefined, cwd = process.cwd(), } = {}) | { rootPid = process.pid, intervalMs = 15000, label = \"\", command = \"\", args = [], env = process.env, requestedParallelism = 0, onSample = () => undefined, cwd = process.cwd(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { startProcessSampler } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:1362` |\n| `summarizeDiagnosticsArtifacts` | function: function summarizeDiagnosticsArtifacts(inputs = []) | inputs = [] | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { summarizeDiagnosticsArtifacts } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:1824` |\n| `summarizeLifecycleObservability` | function: function summarizeLifecycleObservability({ events = [], logPath = \"\", artifactScanDurationMs = 0, artifactUploadDurationMs = 0, totalBytes = 0, fileCount = 0, } = {}) | { events = [], logPath = \"\", artifactScanDurationMs = 0, artifactUploadDurationMs = 0, totalBytes = 0, fileCount = 0, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { summarizeLifecycleObservability } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:219` |\n| `summarizeProcessSamples` | function: function summarizeProcessSamples({ samples = [], requestedParallelism = 0, command = \"\", args = [], env = process.env, activeCpuThreshold = 0.1, } = {}) | { samples = [], requestedParallelism = 0, command = \"\", args = [], env = process.env, activeCpuThreshold = 0.1, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { summarizeProcessSamples } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:1254` |\n| `validateAnchoredPackageRelease` | function: function validateAnchoredPackageRelease({ cwd = process.cwd(), requireManifest = true, requirePackageSetOrder = \"platforms-first-main-last\", requireTrustedPublishing = true, requireLifecycleStages = [\"install\", \"build\", \"verify\", \"publish\"], requirePublishGateSourceLock = false, publishSource = undefined, env = process.env, } = {}) | { cwd = process.cwd(), requireManifest = true, requirePackageSetOrder = \"platforms-first-main-last\", requireTrustedPublishing = true, requireLifecycleStages = [\"install\", \"build\", \"verify\", \"publish\"], requirePublishGateSourceLock = false, publishSource = undefined, env = process.env, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateAnchoredPackageRelease } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:325` |\n| `writeDiagnosticsArtifact` | function: function writeDiagnosticsArtifact(filePath, diagnostics) | filePath, diagnostics | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { writeDiagnosticsArtifact } from \"@kungfu-tech/buildchain/diagnostics\";` | `packages/core/diagnostics.js:1459` |\n\n## `@kungfu-tech/buildchain/homebrew`\n\nTarget: `./packages/core/homebrew.js`. Public symbols: 7.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `checkHomebrewTap` | function: async function checkHomebrewTap({ cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", } = {}) | { cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkHomebrewTap } from \"@kungfu-tech/buildchain/homebrew\";` | `packages/core/homebrew.js:335` |\n| `collectHomebrewTapFacts` | function: async function collectHomebrewTapFacts({ cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", } = {}) | { cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectHomebrewTapFacts } from \"@kungfu-tech/buildchain/homebrew\";` | `packages/core/homebrew.js:223` |\n| `HOMEBREW_TAP_CHECK_CONTRACT` | constant: const HOMEBREW_TAP_CHECK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { HOMEBREW_TAP_CHECK_CONTRACT } from \"@kungfu-tech/buildchain/homebrew\";` | `packages/core/homebrew.js:6` |\n| `HOMEBREW_TAP_FACTS_CONTRACT` | constant: const HOMEBREW_TAP_FACTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { HOMEBREW_TAP_FACTS_CONTRACT } from \"@kungfu-tech/buildchain/homebrew\";` | `packages/core/homebrew.js:5` |\n| `HOMEBREW_TAP_MANIFEST_CONTRACT` | constant: const HOMEBREW_TAP_MANIFEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { HOMEBREW_TAP_MANIFEST_CONTRACT } from \"@kungfu-tech/buildchain/homebrew\";` | `packages/core/homebrew.js:7` |\n| `renderHomebrewFormula` | function: function renderHomebrewFormula(facts) | facts | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { renderHomebrewFormula } from \"@kungfu-tech/buildchain/homebrew\";` | `packages/core/homebrew.js:290` |\n| `updateHomebrewTap` | function: async function updateHomebrewTap({ cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", write = true, } = {}) | { cwd = process.cwd(), packageName = \"buildchain\", releasePassport = \"\", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = \"\", write = true, } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { updateHomebrewTap } from \"@kungfu-tech/buildchain/homebrew\";` | `packages/core/homebrew.js:390` |\n\n## `@kungfu-tech/buildchain/issue-reporting`\n\nTarget: `./packages/core/issue-reporting.js`. Public symbols: 17.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `BUILDCHAIN_CONSUMER_ISSUE_CONTRACT` | constant: const BUILDCHAIN_CONSUMER_ISSUE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONSUMER_ISSUE_CONTRACT } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:4` |\n| `BUILDCHAIN_WORKFLOW_FRICTION_ISSUE_CONTRACT` | constant: const BUILDCHAIN_WORKFLOW_FRICTION_ISSUE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_WORKFLOW_FRICTION_ISSUE_CONTRACT } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:5` |\n| `buildConsumerIssueReport` | function: function buildConsumerIssueReport(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { buildConsumerIssueReport } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:104` |\n| `buildWorkflowFrictionIssueReport` | function: function buildWorkflowFrictionIssueReport(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { buildWorkflowFrictionIssueReport } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:199` |\n| `computeConsumerIssueFingerprint` | function: function computeConsumerIssueFingerprint(fields = {}) | fields = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { computeConsumerIssueFingerprint } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:64` |\n| `consumerIssueMarker` | function: function consumerIssueMarker(fingerprint) | fingerprint | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { consumerIssueMarker } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:76` |\n| `createGitHubIssueRequest` | function: function createGitHubIssueRequest({ token, apiUrl = process.env.GITHUB_API_URL \\|\\| \"https://api.github.com\", fetchImpl = globalThis.fetch, retryDelaysMs = DEFAULT_RETRY_DELAYS_MS, } = {}) | { token, apiUrl = process.env.GITHUB_API_URL \\|\\| \"https://api.github.com\", fetchImpl = globalThis.fetch, retryDelaysMs = DEFAULT_RETRY_DELAYS_MS, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGitHubIssueRequest } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:393` |\n| `DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY` | constant: const DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY | none | value | Import does not declare a throw contract. | none-on-import | `import { DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:6` |\n| `GitHubIssueRequestError` | class: class GitHubIssueRequestError | none | GitHubIssueRequestError | Construction and method errors follow the linked source implementation. | class-dependent | `import { GitHubIssueRequestError } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:23` |\n| `normalizeIssueRepository` | function: function normalizeIssueRepository(repository = DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY) | repository = DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeIssueRepository } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:33` |\n| `parseIssueLabels` | function: function parseIssueLabels(input = DEFAULT_LABELS) | input = DEFAULT_LABELS | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { parseIssueLabels } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:41` |\n| `readOptionalIssueBodyFile` | function: function readOptionalIssueBodyFile(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readOptionalIssueBodyFile } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:385` |\n| `redactIssueText` | function: function redactIssueText(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { redactIssueText } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:51` |\n| `reportBuildchainIssue` | function: async function reportBuildchainIssue(options = {}) | options = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { reportBuildchainIssue } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:292` |\n| `reportWorkflowFrictionIssue` | function: async function reportWorkflowFrictionIssue(options = {}) | options = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { reportWorkflowFrictionIssue } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:378` |\n| `truncateUtf8` | function: function truncateUtf8(text, maxBytes = DEFAULT_MAX_BODY_BYTES) | text, maxBytes = DEFAULT_MAX_BODY_BYTES | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { truncateUtf8 } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:84` |\n| `workflowFrictionMarker` | function: function workflowFrictionMarker(fingerprint) | fingerprint | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { workflowFrictionMarker } from \"@kungfu-tech/buildchain/issue-reporting\";` | `packages/core/issue-reporting.js:80` |\n\n## `@kungfu-tech/buildchain/kfd`\n\nTarget: `./packages/core/kfd.js`. Public symbols: 17.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `buildchainKfdClaims` | constant: const buildchainKfdClaims | none | value | Import does not declare a throw contract. | none-on-import | `import { buildchainKfdClaims } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:896` |\n| `checkKfdUpstreamFacts` | function: function checkKfdUpstreamFacts(aggregate = {}) | aggregate = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkKfdUpstreamFacts } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:798` |\n| `collectKfdAggregate` | function: function collectKfdAggregate({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectKfdAggregate } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:868` |\n| `collectKfdStatus` | function: function collectKfdStatus({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectKfdStatus } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:902` |\n| `collectKfdUpstreamFacts` | function: function collectKfdUpstreamFacts({ cwd = process.cwd(), components = undefined, includeOwn = true } = {}) | { cwd = process.cwd(), components = undefined, includeOwn = true } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectKfdUpstreamFacts } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:689` |\n| `discoverKfdStandards` | function: function discoverKfdStandards() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { discoverKfdStandards } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:464` |\n| `kfd1` | constant: const kfd1 | none | value | Import does not declare a throw contract. | none-on-import | `import { kfd1 } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:546` |\n| `kfd2` | constant: const kfd2 | none | value | Import does not declare a throw contract. | none-on-import | `import { kfd2 } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:561` |\n| `kfd3` | constant: const kfd3 | none | value | Import does not declare a throw contract. | none-on-import | `import { kfd3 } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:663` |\n| `kfd4` | constant: const kfd4 | none | value | Import does not declare a throw contract. | none-on-import | `import { kfd4 } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:681` |\n| `layout` | constant: const layout | none | value | Import does not declare a throw contract. | none-on-import | `import { layout } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:905` |\n| `listKfdSchemas` | function: function listKfdSchemas({ standard = \"\" } = {}) | { standard = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { listKfdSchemas } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:492` |\n| `listKfdUpstreamRoles` | function: function listKfdUpstreamRoles() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { listKfdUpstreamRoles } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:771` |\n| `normalizeKfdStandardId` | function: function normalizeKfdStandardId(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfdStandardId } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:455` |\n| `readKfdSchema` | function: function readKfdSchema({ standard, schema = \"\" } = {}) | { standard, schema = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readKfdSchema } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:520` |\n| `schemas` | constant: const schemas | none | value | Import does not declare a throw contract. | none-on-import | `import { schemas } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:495` |\n| `upstream` | constant: const upstream | none | value | Import does not declare a throw contract. | none-on-import | `import { upstream } from \"@kungfu-tech/buildchain/kfd\";` | `packages/core/kfd.js:300` |\n\n## `@kungfu-tech/buildchain/kfd-product-gates`\n\nTarget: `./packages/core/kfd-product-gates.js`. Public symbols: 14.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `createKfdSupportProjection` | function: function createKfdSupportProjection({ matrix, matrixRoot = \"\", gateResults = [], authorityPath = \".buildchain/kfd/support-matrix.json\", expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {}) | { matrix, matrixRoot = \"\", gateResults = [], authorityPath = \".buildchain/kfd/support-matrix.json\", expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfdSupportProjection } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:716` |\n| `evaluateKfdProductGate` | function: async function evaluateKfdProductGate({ cwd = process.cwd(), input, expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {}) | { cwd = process.cwd(), input, expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluateKfdProductGate } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:465` |\n| `KFD_PRODUCT_GATE_CONTRACT` | constant: const KFD_PRODUCT_GATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_PRODUCT_GATE_CONTRACT } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:11` |\n| `KFD_PRODUCT_GATE_INPUT_CONTRACT` | constant: const KFD_PRODUCT_GATE_INPUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_PRODUCT_GATE_INPUT_CONTRACT } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:9` |\n| `KFD_PRODUCT_GATE_INPUT_SCHEMA` | constant: const KFD_PRODUCT_GATE_INPUT_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_PRODUCT_GATE_INPUT_SCHEMA } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:55` |\n| `KFD_PRODUCT_GATE_INPUT_SCHEMA_ID` | constant: const KFD_PRODUCT_GATE_INPUT_SCHEMA_ID | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_PRODUCT_GATE_INPUT_SCHEMA_ID } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:15` |\n| `KFD_SUPPORT_PROJECTION_CONTRACT` | constant: const KFD_SUPPORT_PROJECTION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_SUPPORT_PROJECTION_CONTRACT } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:13` |\n| `KFD_SUPPORT_PROJECTION_SCHEMA` | constant: const KFD_SUPPORT_PROJECTION_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_SUPPORT_PROJECTION_SCHEMA } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:130` |\n| `KFD_SUPPORT_PROJECTION_SCHEMA_ID` | constant: const KFD_SUPPORT_PROJECTION_SCHEMA_ID | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_SUPPORT_PROJECTION_SCHEMA_ID } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:17` |\n| `kfdProductGateDigest` | function: function kfdProductGateDigest(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { kfdProductGateDigest } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:188` |\n| `kfdProductGates` | constant: const kfdProductGates | none | value | Import does not declare a throw contract. | none-on-import | `import { kfdProductGates } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:859` |\n| `validateKfdProductGateResult` | function: function validateKfdProductGateResult(result, { expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {}) | result, { expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfdProductGateResult } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:565` |\n| `validateKfdSupportProjection` | function: function validateKfdSupportProjection(projection, { expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {}) | projection, { expectedSourceSha = \"\", checkedAt = new Date().toISOString(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfdSupportProjection } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:796` |\n| `verifyKfdRecord` | function: async function verifyKfdRecord(record) | record | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyKfdRecord } from \"@kungfu-tech/buildchain/kfd-product-gates\";` | `packages/core/kfd-product-gates.js:308` |\n\n## `@kungfu-tech/buildchain/kfd-agent-hub`\n\nTarget: `./packages/core/kfd-agent-hub.js`. Public symbols: 10.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `explainKfdAgentHub` | function: function explainKfdAgentHub({ cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = \"\" } = {}) | { cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { explainKfdAgentHub } from \"@kungfu-tech/buildchain/kfd-agent-hub\";` | `packages/core/kfd-agent-hub.js:470` |\n| `initKfdAgentHub` | function: function initKfdAgentHub({ cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, write = false, force = false } = {}) | { cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, write = false, force = false } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { initKfdAgentHub } from \"@kungfu-tech/buildchain/kfd-agent-hub\";` | `packages/core/kfd-agent-hub.js:363` |\n| `inspectKfdAgentHub` | function: function inspectKfdAgentHub({ cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = \"\" } = {}) | { cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { inspectKfdAgentHub } from \"@kungfu-tech/buildchain/kfd-agent-hub\";` | `packages/core/kfd-agent-hub.js:384` |\n| `KFD_AGENT_HUB_ADOPTION_CONTRACT` | constant: const KFD_AGENT_HUB_ADOPTION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_ADOPTION_CONTRACT } from \"@kungfu-tech/buildchain/kfd-agent-hub\";` | `packages/core/kfd-agent-hub.js:9` |\n| `KFD_AGENT_HUB_ADOPTION_SCHEMA` | constant: const KFD_AGENT_HUB_ADOPTION_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_ADOPTION_SCHEMA } from \"@kungfu-tech/buildchain/kfd-agent-hub\";` | `packages/core/kfd-agent-hub.js:12` |\n| `KFD_AGENT_HUB_DECLARATION` | constant: const KFD_AGENT_HUB_DECLARATION | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_DECLARATION } from \"@kungfu-tech/buildchain/kfd-agent-hub\";` | `packages/core/kfd-agent-hub.js:7` |\n| `KFD_AGENT_HUB_LOCK_CONTRACT` | constant: const KFD_AGENT_HUB_LOCK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_LOCK_CONTRACT } from \"@kungfu-tech/buildchain/kfd-agent-hub\";` | `packages/core/kfd-agent-hub.js:10` |\n| `KFD_AGENT_HUB_OUTPUT_DIR` | constant: const KFD_AGENT_HUB_OUTPUT_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_OUTPUT_DIR } from \"@kungfu-tech/buildchain/kfd-agent-hub\";` | `packages/core/kfd-agent-hub.js:8` |\n| `KFD_AGENT_HUB_VERIFICATION_CONTRACT` | constant: const KFD_AGENT_HUB_VERIFICATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_VERIFICATION_CONTRACT } from \"@kungfu-tech/buildchain/kfd-agent-hub\";` | `packages/core/kfd-agent-hub.js:11` |\n| `testKfdAgentHub` | function: function testKfdAgentHub({ cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, outputDir = KFD_AGENT_HUB_OUTPUT_DIR, kfdRoot = \"\", run = defaultRun } = {}) | { cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, outputDir = KFD_AGENT_HUB_OUTPUT_DIR, kfdRoot = \"\", run = defaultRun } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { testKfdAgentHub } from \"@kungfu-tech/buildchain/kfd-agent-hub\";` | `packages/core/kfd-agent-hub.js:399` |\n\n## `@kungfu-tech/buildchain/buildchain-layout`\n\nTarget: `./packages/core/buildchain-layout.js`. Public symbols: 41.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `BUILDCHAIN_CONFIG_PATH` | constant: const BUILDCHAIN_CONFIG_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONFIG_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:7` |\n| `BUILDCHAIN_CONTRACT_LOCK_PATH` | constant: const BUILDCHAIN_CONTRACT_LOCK_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTRACT_LOCK_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:9` |\n| `BUILDCHAIN_DIR` | constant: const BUILDCHAIN_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_DIR } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:4` |\n| `BUILDCHAIN_GENERATED_DIRS` | constant: const BUILDCHAIN_GENERATED_DIRS | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_GENERATED_DIRS } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:36` |\n| `BUILDCHAIN_KFD_ROOT` | constant: const BUILDCHAIN_KFD_ROOT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD_ROOT } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:11` |\n| `BUILDCHAIN_KFD1_CONTRACT_WORLD_WITNESS_PATH` | constant: const BUILDCHAIN_KFD1_CONTRACT_WORLD_WITNESS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD1_CONTRACT_WORLD_WITNESS_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:16` |\n| `BUILDCHAIN_KFD1_DIR` | constant: const BUILDCHAIN_KFD1_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD1_DIR } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:12` |\n| `BUILDCHAIN_KFD1_RELEASE_GATE_PATH` | constant: const BUILDCHAIN_KFD1_RELEASE_GATE_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD1_RELEASE_GATE_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:17` |\n| `BUILDCHAIN_KFD1_VERIFY_RESULT_PATH` | constant: const BUILDCHAIN_KFD1_VERIFY_RESULT_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD1_VERIFY_RESULT_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:18` |\n| `BUILDCHAIN_KFD2_CLAIM_ARGS_PATH` | constant: const BUILDCHAIN_KFD2_CLAIM_ARGS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_CLAIM_ARGS_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:21` |\n| `BUILDCHAIN_KFD2_CLAIMS_DIR` | constant: const BUILDCHAIN_KFD2_CLAIMS_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_CLAIMS_DIR } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:22` |\n| `BUILDCHAIN_KFD2_DIR` | constant: const BUILDCHAIN_KFD2_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_DIR } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:13` |\n| `BUILDCHAIN_KFD2_REGISTRY_PATH` | constant: const BUILDCHAIN_KFD2_REGISTRY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_REGISTRY_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:19` |\n| `BUILDCHAIN_KFD2_RELEASE_CLAIMS_PATH` | constant: const BUILDCHAIN_KFD2_RELEASE_CLAIMS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD2_RELEASE_CLAIMS_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:20` |\n| `BUILDCHAIN_KFD3_ARTIFACT_WITNESS_PATH` | constant: const BUILDCHAIN_KFD3_ARTIFACT_WITNESS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_ARTIFACT_WITNESS_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:26` |\n| `BUILDCHAIN_KFD3_CAPABILITY_QUERY_PATH` | constant: const BUILDCHAIN_KFD3_CAPABILITY_QUERY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_CAPABILITY_QUERY_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:27` |\n| `BUILDCHAIN_KFD3_COLLABORATION_INTERFACE_PATH` | constant: const BUILDCHAIN_KFD3_COLLABORATION_INTERFACE_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_COLLABORATION_INTERFACE_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:24` |\n| `BUILDCHAIN_KFD3_DIR` | constant: const BUILDCHAIN_KFD3_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_DIR } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:14` |\n| `BUILDCHAIN_KFD3_PREBUILD_WITNESS_PATH` | constant: const BUILDCHAIN_KFD3_PREBUILD_WITNESS_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_PREBUILD_WITNESS_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:25` |\n| `BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH` | constant: const BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:23` |\n| `BUILDCHAIN_KFD4_DIR` | constant: const BUILDCHAIN_KFD4_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD4_DIR } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:15` |\n| `BUILDCHAIN_LAYOUT_DISCOVERY_CONTRACT` | constant: const BUILDCHAIN_LAYOUT_DISCOVERY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LAYOUT_DISCOVERY_CONTRACT } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:6` |\n| `BUILDCHAIN_RELEASE_PASSPORT_PATH` | constant: const BUILDCHAIN_RELEASE_PASSPORT_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_RELEASE_PASSPORT_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:33` |\n| `BUILDCHAIN_VERSION_PIN_PATH` | constant: const BUILDCHAIN_VERSION_PIN_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_VERSION_PIN_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:5` |\n| `createBuildchainLayoutDiscovery` | function: function createBuildchainLayoutDiscovery({ cwd = process.cwd(), buildchainVersion = \"\", } = {}) | { cwd = process.cwd(), buildchainVersion = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainLayoutDiscovery } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:99` |\n| `discoverBuildchainRepoFiles` | function: function discoverBuildchainRepoFiles(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { discoverBuildchainRepoFiles } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:143` |\n| `firstExistingRepoPath` | function: function firstExistingRepoPath(cwd, candidates = []) | cwd, candidates = [] | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { firstExistingRepoPath } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:58` |\n| `LEGACY_BUILDCHAIN_CONFIG_PATH` | constant: const LEGACY_BUILDCHAIN_CONFIG_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_CONFIG_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:8` |\n| `LEGACY_BUILDCHAIN_CONTRACT_LOCK_PATH` | constant: const LEGACY_BUILDCHAIN_CONTRACT_LOCK_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_CONTRACT_LOCK_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:10` |\n| `LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH` | constant: const LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:28` |\n| `LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATHS` | constant: const LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATHS | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_KFD3_SURFACE_REGISTRY_PATHS } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:29` |\n| `LEGACY_BUILDCHAIN_RELEASE_PASSPORT_PATH` | constant: const LEGACY_BUILDCHAIN_RELEASE_PASSPORT_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { LEGACY_BUILDCHAIN_RELEASE_PASSPORT_PATH } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:34` |\n| `migrateBuildchainLayout` | function: function migrateBuildchainLayout({ cwd = process.cwd(), write = false, force = false } = {}) | { cwd = process.cwd(), write = false, force = false } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { migrateBuildchainLayout } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:287` |\n| `planBuildchainLayoutMigration` | function: function planBuildchainLayoutMigration({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { planBuildchainLayoutMigration } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:265` |\n| `repoPath` | function: function repoPath(cwd, relativePath) | cwd, relativePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { repoPath } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:54` |\n| `resolveBuildchainConfigPath` | function: function resolveBuildchainConfigPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveBuildchainConfigPath } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:67` |\n| `resolveBuildchainContractLockPath` | function: function resolveBuildchainContractLockPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveBuildchainContractLockPath } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:74` |\n| `resolveKfd2ProductClaimsRegistryPath` | function: function resolveKfd2ProductClaimsRegistryPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveKfd2ProductClaimsRegistryPath } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:81` |\n| `resolveKfd3SurfaceRegistryPath` | function: function resolveKfd3SurfaceRegistryPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveKfd3SurfaceRegistryPath } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:85` |\n| `resolveReleasePassportPath` | function: function resolveReleasePassportPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveReleasePassportPath } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:92` |\n| `toPosixPath` | function: function toPosixPath(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { toPosixPath } from \"@kungfu-tech/buildchain/buildchain-layout\";` | `packages/core/buildchain-layout.js:50` |\n\n## `@kungfu-tech/buildchain/release-line-bootstrap`\n\nTarget: `./packages/core/release-line-bootstrap.js`. Public symbols: 2.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `planReleaseLineBootstrap` | function: function planReleaseLineBootstrap({ cwd = process.cwd(), major, minor, sourceRef = \"\", initialVersion = \"\", requiredStatusCheck = \"check\", setDefault = true, createAlphaPr = true, approvalCount = 1, bootstrapBranch = \"\", } = {}) | { cwd = process.cwd(), major, minor, sourceRef = \"\", initialVersion = \"\", requiredStatusCheck = \"check\", setDefault = true, createAlphaPr = true, approvalCount = 1, bootstrapBranch = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { planReleaseLineBootstrap } from \"@kungfu-tech/buildchain/release-line-bootstrap\";` | `packages/core/release-line-bootstrap.js:140` |\n| `writeReleaseLineBootstrapVersionState` | function: function writeReleaseLineBootstrapVersionState({ cwd = process.cwd(), major, minor, sourceRef = \"\", initialVersion = \"\", runVersionStateLifecycle = true, generatedAt = \"\", } = {}) | { cwd = process.cwd(), major, minor, sourceRef = \"\", initialVersion = \"\", runVersionStateLifecycle = true, generatedAt = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { writeReleaseLineBootstrapVersionState } from \"@kungfu-tech/buildchain/release-line-bootstrap\";` | `packages/core/release-line-bootstrap.js:237` |\n\n## `@kungfu-tech/buildchain/readme-badges`\n\nTarget: `./packages/core/readme-badges.js`. Public symbols: 17.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `BADGE_BUNDLE_DEFAULT_CLAIMS` | constant: const BADGE_BUNDLE_DEFAULT_CLAIMS | none | value | Import does not declare a throw contract. | none-on-import | `import { BADGE_BUNDLE_DEFAULT_CLAIMS } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:17` |\n| `BADGE_BUNDLE_FACTS_CONTRACT` | constant: const BADGE_BUNDLE_FACTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BADGE_BUNDLE_FACTS_CONTRACT } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:13` |\n| `checkBadgeBundleBlock` | function: function checkBadgeBundleBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkBadgeBundleBlock } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:867` |\n| `checkReadmeBadgeBlock` | function: function checkReadmeBadgeBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkReadmeBadgeBlock } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:848` |\n| `collectBadgeBundleFacts` | function: async function collectBadgeBundleFacts({ cwd = process.cwd(), claims = undefined } = {}) | { cwd = process.cwd(), claims = undefined } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectBadgeBundleFacts } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:790` |\n| `collectReadmeBadgeFacts` | function: async function collectReadmeBadgeFacts({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectReadmeBadgeFacts } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:700` |\n| `createKfdBadgeSpecsFromStandards` | function: function createKfdBadgeSpecsFromStandards(standardsMetadata) | standardsMetadata | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfdBadgeSpecsFromStandards } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:126` |\n| `createReadmeBadgeEndpointRegistry` | function: function createReadmeBadgeEndpointRegistry({ kfdSpecs = undefined, kfdStandards = undefined } = {}) | { kfdSpecs = undefined, kfdStandards = undefined } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { createReadmeBadgeEndpointRegistry } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:133` |\n| `README_BADGE_BLOCK_END` | constant: const README_BADGE_BLOCK_END | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_BLOCK_END } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:15` |\n| `README_BADGE_BLOCK_START` | constant: const README_BADGE_BLOCK_START | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_BLOCK_START } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:14` |\n| `README_BADGE_FACTS_CONTRACT` | constant: const README_BADGE_FACTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_FACTS_CONTRACT } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:12` |\n| `README_BADGE_HOSTED_BASE_URL` | constant: const README_BADGE_HOSTED_BASE_URL | none | value | Import does not declare a throw contract. | none-on-import | `import { README_BADGE_HOSTED_BASE_URL } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:16` |\n| `readReadme` | function: function readReadme({ cwd = process.cwd(), readmePath = \"README.md\" } = {}) | { cwd = process.cwd(), readmePath = \"README.md\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readReadme } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:891` |\n| `renderBadgeBundleBlock` | function: function renderBadgeBundleBlock(facts) | facts | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { renderBadgeBundleBlock } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:840` |\n| `renderReadmeBadgeBlock` | function: function renderReadmeBadgeBlock(facts) | facts | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { renderReadmeBadgeBlock } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:836` |\n| `updateBadgeBundleBlock` | function: function updateBadgeBundleBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { updateBadgeBundleBlock } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:887` |\n| `updateReadmeBadgeBlock` | function: function updateReadmeBadgeBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { updateReadmeBadgeBlock } from \"@kungfu-tech/buildchain/readme-badges\";` | `packages/core/readme-badges.js:874` |\n\n## `@kungfu-tech/buildchain/public-surface-audit`\n\nTarget: `./packages/core/public-surface-audit.js`. Public symbols: 8.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `assertPublicSurfaceReverseAudit` | function: function assertPublicSurfaceReverseAudit(report) | report | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { assertPublicSurfaceReverseAudit } from \"@kungfu-tech/buildchain/public-surface-audit\";` | `packages/core/public-surface-audit.js:261` |\n| `BUILDCHAIN_PUBLIC_SURFACE_AUDIT_CONTRACT` | constant: const BUILDCHAIN_PUBLIC_SURFACE_AUDIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_PUBLIC_SURFACE_AUDIT_CONTRACT } from \"@kungfu-tech/buildchain/public-surface-audit\";` | `packages/core/public-surface-audit.js:12` |\n| `collectPublicSurfaceReverseAudit` | function: function collectPublicSurfaceReverseAudit({ root = process.cwd(), cliRegistry: suppliedCliRegistry = undefined, workflowRegistry: suppliedWorkflowRegistry = undefined, pageRegistry: suppliedPageRegistry = undefined, } = {}) | { root = process.cwd(), cliRegistry: suppliedCliRegistry = undefined, workflowRegistry: suppliedWorkflowRegistry = undefined, pageRegistry: suppliedPageRegistry = undefined, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectPublicSurfaceReverseAudit } from \"@kungfu-tech/buildchain/public-surface-audit\";` | `packages/core/public-surface-audit.js:161` |\n| `enumerateActionInputs` | function: function enumerateActionInputs({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateActionInputs } from \"@kungfu-tech/buildchain/public-surface-audit\";` | `packages/core/public-surface-audit.js:91` |\n| `enumerateCliCommandsFromBin` | function: function enumerateCliCommandsFromBin({ root = process.cwd(), binPath = \"bin/buildchain.mjs\", } = {}) | { root = process.cwd(), binPath = \"bin/buildchain.mjs\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateCliCommandsFromBin } from \"@kungfu-tech/buildchain/public-surface-audit\";` | `packages/core/public-surface-cli.js:93` |\n| `enumerateDocCommandRefs` | function: function enumerateDocCommandRefs({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateDocCommandRefs } from \"@kungfu-tech/buildchain/public-surface-audit\";` | `packages/core/public-surface-audit.js:115` |\n| `enumerateSitePages` | function: function enumerateSitePages({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateSitePages } from \"@kungfu-tech/buildchain/public-surface-audit\";` | `packages/core/public-surface-audit.js:106` |\n| `enumerateWorkflowInputs` | function: function enumerateWorkflowInputs({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateWorkflowInputs } from \"@kungfu-tech/buildchain/public-surface-audit\";` | `packages/core/public-surface-audit.js:74` |\n\n## `@kungfu-tech/buildchain/logging`\n\nTarget: `./packages/core/logging.js`. Public symbols: 13.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `appendBuildchainLogEvent` | function: function appendBuildchainLogEvent(filePath, event) | filePath, event | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { appendBuildchainLogEvent } from \"@kungfu-tech/buildchain/logging\";` | `packages/core/logging.js:67` |\n| `BUILDCHAIN_CONTROL_PLANE_SUMMARY_CONTRACT` | constant: const BUILDCHAIN_CONTROL_PLANE_SUMMARY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_CONTROL_PLANE_SUMMARY_CONTRACT } from \"@kungfu-tech/buildchain/logging\";` | `packages/core/logging.js:8` |\n| `BUILDCHAIN_LOG_EVENT_CONTRACT` | constant: const BUILDCHAIN_LOG_EVENT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LOG_EVENT_CONTRACT } from \"@kungfu-tech/buildchain/logging\";` | `packages/core/logging.js:6` |\n| `BUILDCHAIN_LOG_SUMMARY_CONTRACT` | constant: const BUILDCHAIN_LOG_SUMMARY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_LOG_SUMMARY_CONTRACT } from \"@kungfu-tech/buildchain/logging\";` | `packages/core/logging.js:7` |\n| `createBuildchainLogger` | function: function createBuildchainLogger(options = {}) | options = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { createBuildchainLogger } from \"@kungfu-tech/buildchain/logging\";` | `packages/core/logging.js:300` |\n| `defaultBuildchainLogPath` | function: function defaultBuildchainLogPath({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { defaultBuildchainLogPath } from \"@kungfu-tech/buildchain/logging\";` | `packages/core/logging.js:41` |\n| `normalizeBuildchainLogEvent` | function: function normalizeBuildchainLogEvent(input = {}, defaults = {}) | input = {}, defaults = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { normalizeBuildchainLogEvent } from \"@kungfu-tech/buildchain/logging\";` | `packages/core/logging.js:45` |\n| `readBuildchainLogEvents` | function: function readBuildchainLogEvents(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readBuildchainLogEvents } from \"@kungfu-tech/buildchain/logging\";` | `packages/core/logging.js:75` |\n| `recordBuildchainControlPlaneOutcome` | function: function recordBuildchainControlPlaneOutcome({ domain, action = \"\", outcome = \"\", reason = \"\", attributes = {}, } = {}, options = {}) | { domain, action = \"\", outcome = \"\", reason = \"\", attributes = {}, } = {}, options = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { recordBuildchainControlPlaneOutcome } from \"@kungfu-tech/buildchain/logging\";` | `packages/core/logging.js:160` |\n| `redactBuildchainLogAttributes` | function: function redactBuildchainLogAttributes(attributes = {}) | attributes = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { redactBuildchainLogAttributes } from \"@kungfu-tech/buildchain/logging\";` | `packages/core/logging.js:33` |\n| `summarizeBuildchainControlPlaneEvents` | function: function summarizeBuildchainControlPlaneEvents(input = {}) | input = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { summarizeBuildchainControlPlaneEvents } from \"@kungfu-tech/buildchain/logging\";` | `packages/core/logging.js:115` |\n| `summarizeBuildchainLogEvents` | function: function summarizeBuildchainLogEvents(input = {}) | input = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { summarizeBuildchainLogEvents } from \"@kungfu-tech/buildchain/logging\";` | `packages/core/logging.js:192` |\n| `verifyBuildchainLogEvents` | function: function verifyBuildchainLogEvents({ path: filePath = \"\", events: inputEvents = undefined, minEvents = 1, allowErrors = false, requirePhases = [], requireComponents = [], requireEvents = [], } = {}) | { path: filePath = \"\", events: inputEvents = undefined, minEvents = 1, allowErrors = false, requirePhases = [], requireComponents = [], requireEvents = [], } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyBuildchainLogEvents } from \"@kungfu-tech/buildchain/logging\";` | `packages/core/logging.js:230` |\n\n## `@kungfu-tech/buildchain/portable-dev-cache`\n\nTarget: `./packages/core/portable-dev-cache.js`. Public symbols: 3.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `createPortableDevCachePlan` | function: function createPortableDevCachePlan(manifest) | manifest | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPortableDevCachePlan } from \"@kungfu-tech/buildchain/portable-dev-cache\";` | `packages/core/portable-dev-cache.js:172` |\n| `createPortableDevCacheReceipt` | function: function createPortableDevCacheReceipt({ plan, matchedKey = \"\", cacheHit = \"\", validationStatus = \"pass\", validationReason = \"\", coldFallbackStatus = \"not-run\", }) | { plan, matchedKey = \"\", cacheHit = \"\", validationStatus = \"pass\", validationReason = \"\", coldFallbackStatus = \"not-run\", } | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPortableDevCacheReceipt } from \"@kungfu-tech/buildchain/portable-dev-cache\";` | `packages/core/portable-dev-cache.js:226` |\n| `verifyPortableDevCachePlan` | function: function verifyPortableDevCachePlan(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyPortableDevCachePlan } from \"@kungfu-tech/buildchain/portable-dev-cache\";` | `packages/core/portable-dev-cache.js:211` |\n\n## `@kungfu-tech/buildchain/publication-artifact`\n\nTarget: `./packages/core/publication-artifact.js`. Public symbols: 7.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `collectPublicationArtifact` | function: function collectPublicationArtifact({ cwd = process.cwd(), sourceSha = \"\", sourceBundle = true, sourceBundlePath = \"\", generatedAt = \"\", manifestPath = \"\", passportPath = \"\", } = {}) | { cwd = process.cwd(), sourceSha = \"\", sourceBundle = true, sourceBundlePath = \"\", generatedAt = \"\", manifestPath = \"\", passportPath = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { collectPublicationArtifact } from \"@kungfu-tech/buildchain/publication-artifact\";` | `packages/core/publication-artifact.js:271` |\n| `createPublicationSourceBundle` | function: function createPublicationSourceBundle({ cwd = process.cwd(), sourcePaths = [], output = \".buildchain/publication/source.tar.gz\", } = {}) | { cwd = process.cwd(), sourcePaths = [], output = \".buildchain/publication/source.tar.gz\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write, subprocess | `import { createPublicationSourceBundle } from \"@kungfu-tech/buildchain/publication-artifact\";` | `packages/core/publication-artifact.js:249` |\n| `PUBLICATION_ARTIFACT_ARCHIVE_CONTRACT` | constant: const PUBLICATION_ARTIFACT_ARCHIVE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_ARCHIVE_CONTRACT } from \"@kungfu-tech/buildchain/publication-artifact\";` | `packages/core/publication-artifact.js:9` |\n| `PUBLICATION_ARTIFACT_MANIFEST_CONTRACT` | constant: const PUBLICATION_ARTIFACT_MANIFEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_MANIFEST_CONTRACT } from \"@kungfu-tech/buildchain/publication-artifact\";` | `packages/core/publication-artifact.js:7` |\n| `PUBLICATION_ARTIFACT_PASSPORT_CONTRACT` | constant: const PUBLICATION_ARTIFACT_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_PASSPORT_CONTRACT } from \"@kungfu-tech/buildchain/publication-artifact\";` | `packages/core/publication-artifact.js:8` |\n| `PUBLICATION_ARTIFACT_REGISTRY_CONTRACT` | constant: const PUBLICATION_ARTIFACT_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain/publication-artifact\";` | `packages/core/publication-artifact.js:10` |\n| `writePublicationArtifact` | function: function writePublicationArtifact({ cwd = process.cwd(), output = \"\", passportOutput = \"\", registryOutput = \"\", registryInputs = [], sourceSha = \"\", sourceBundle = true, sourceBundlePath = \"\", generatedAt = \"\", } = {}) | { cwd = process.cwd(), output = \"\", passportOutput = \"\", registryOutput = \"\", registryInputs = [], sourceSha = \"\", sourceBundle = true, sourceBundlePath = \"\", generatedAt = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { writePublicationArtifact } from \"@kungfu-tech/buildchain/publication-artifact\";` | `packages/core/publication-artifact.js:598` |\n\n## `@kungfu-tech/buildchain/publication-package`\n\nTarget: `./packages/core/publication-package.js`. Public symbols: 3.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `collectPublicationPackageFacts` | function: function collectPublicationPackageFacts({ cwd = process.cwd(), packageName = \"\", outputDir = \".buildchain/publication/npm-package\", } = {}) | { cwd = process.cwd(), packageName = \"\", outputDir = \".buildchain/publication/npm-package\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { collectPublicationPackageFacts } from \"@kungfu-tech/buildchain/publication-package\";` | `packages/core/publication-package.js:74` |\n| `preparePublicationNpmPackage` | function: function preparePublicationNpmPackage({ cwd = process.cwd(), outputDir = \".buildchain/publication/npm-package\", packageName = \"\", } = {}) | { cwd = process.cwd(), outputDir = \".buildchain/publication/npm-package\", packageName = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { preparePublicationNpmPackage } from \"@kungfu-tech/buildchain/publication-package\";` | `packages/core/publication-package.js:120` |\n| `PUBLICATION_NPM_PACKAGE_CONTRACT` | constant: const PUBLICATION_NPM_PACKAGE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_NPM_PACKAGE_CONTRACT } from \"@kungfu-tech/buildchain/publication-package\";` | `packages/core/publication-package.js:6` |\n\n## `@kungfu-tech/buildchain/publication-reproducibility`\n\nTarget: `./packages/core/publication-reproducibility.js`. Public symbols: 2.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `PUBLICATION_REPRODUCIBILITY_RECEIPT_CONTRACT` | constant: const PUBLICATION_REPRODUCIBILITY_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_REPRODUCIBILITY_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/publication-reproducibility\";` | `packages/core/publication-reproducibility.js:12` |\n| `verifyPublicationReproducibility` | function: function verifyPublicationReproducibility({ cwd = process.cwd(), sourceSha = \"\", output = DEFAULT_OUTPUT, promote = false, keepWorkspaces = false, pullToolchain = true, packageName = \"\", allowUnpinnedToolchain = false, overlayPaths = [DEFAULT_REGISTRY_INPUT_DIR, DEFAULT_REGISTRY_HYDRATION], } = {}) | { cwd = process.cwd(), sourceSha = \"\", output = DEFAULT_OUTPUT, promote = false, keepWorkspaces = false, pullToolchain = true, packageName = \"\", allowUnpinnedToolchain = false, overlayPaths = [DEFAULT_REGISTRY_INPUT_DIR, DEFAULT_REGISTRY_HYDRATION], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { verifyPublicationReproducibility } from \"@kungfu-tech/buildchain/publication-reproducibility\";` | `packages/core/publication-reproducibility.js:869` |\n\n## `@kungfu-tech/buildchain/publication-sealed-bundle`\n\nTarget: `./packages/core/publication-sealed-bundle.js`. Public symbols: 3.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `createPublicationSealedBundle` | function: function createPublicationSealedBundle({ candidate, packageName, packageVersion, npmTarballPath, npmIntegrity, releaseAssetPaths = [], githubReleaseRequired = true, } = {}) | { candidate, packageName, packageVersion, npmTarballPath, npmIntegrity, releaseAssetPaths = [], githubReleaseRequired = true, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationSealedBundle } from \"@kungfu-tech/buildchain/publication-sealed-bundle\";` | `packages/core/publication-sealed-bundle.js:75` |\n| `PUBLICATION_SEALED_BUNDLE_CONTRACT` | constant: const PUBLICATION_SEALED_BUNDLE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_SEALED_BUNDLE_CONTRACT } from \"@kungfu-tech/buildchain/publication-sealed-bundle\";` | `packages/core/publication-sealed-bundle.js:10` |\n| `verifyPublicationSealedBundle` | function: function verifyPublicationSealedBundle({ bundleRoot, manifest } = {}) | { bundleRoot, manifest } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyPublicationSealedBundle } from \"@kungfu-tech/buildchain/publication-sealed-bundle\";` | `packages/core/publication-sealed-bundle.js:124` |\n\n## `@kungfu-tech/buildchain/paper`\n\nTarget: `./packages/core/paper.js`. Public symbols: 48.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `collectPaperAgentEntry` | function: function collectPaperAgentEntry({ cwd = process.cwd(), buildchainSha = \"\", mode = \"contract\", env = process.env, } = {}) | { cwd = process.cwd(), buildchainSha = \"\", mode = \"contract\", env = process.env, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectPaperAgentEntry } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-agent-entry.js:248` |\n| `collectPaperFleetAudit` | function: function collectPaperFleetAudit({ root = process.cwd(), repositories = [], buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainSha = \"\", governance = {}, } = {}) | { root = process.cwd(), repositories = [], buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainSha = \"\", governance = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectPaperFleetAudit } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-fleet.js:158` |\n| `collectPaperPreflight` | function: function collectPaperPreflight({ cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainRef = \"v3\", buildchainSha = \"\", registry = NPM_REGISTRY, offline = false, agentEntryMode = \"contract\", } = {}) | { cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainRef = \"v3\", buildchainSha = \"\", registry = NPM_REGISTRY, offline = false, agentEntryMode = \"contract\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectPaperPreflight } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:2413` |\n| `collectPaperStatus` | function: function collectPaperStatus({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectPaperStatus } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:1471` |\n| `createPaperAgentEntry` | function: function createPaperAgentEntry({ buildchainVersion, buildchainSha, developmentRef, }) | { buildchainVersion, buildchainSha, developmentRef, } | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPaperAgentEntry } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-agent-entry.js:93` |\n| `createPaperAlphaPlan` | function: function createPaperAlphaPlan({ cwd = process.cwd(), sourceRef = \"\", targetRef = \"\", } = {}) | { cwd = process.cwd(), sourceRef = \"\", targetRef = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPaperAlphaPlan } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:2655` |\n| `createPaperBuildPlan` | function: function createPaperBuildPlan({ cwd = process.cwd(), sourceSha = \"\", pullToolchain = true, } = {}) | { cwd = process.cwd(), sourceSha = \"\", pullToolchain = true, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPaperBuildPlan } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:2592` |\n| `createPaperProvisioningAuthority` | function: function createPaperProvisioningAuthority({ repository, packageName, buildchainVersion, buildchainSha, contractLock, buildWorkflow, verifyWorkflow, releaseWorkflow, agentEntry, agentInstructions, environment = \"\", }) | { repository, packageName, buildchainVersion, buildchainSha, contractLock, buildWorkflow, verifyWorkflow, releaseWorkflow, agentEntry, agentInstructions, environment = \"\", } | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPaperProvisioningAuthority } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:519` |\n| `createPaperResumePlan` | function: function createPaperResumePlan({ cwd = process.cwd(), buildchainRef = \"\", } = {}) | { cwd = process.cwd(), buildchainRef = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { createPaperResumePlan } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:2713` |\n| `createPaperWorkStartPlan` | function: function createPaperWorkStartPlan({ cwd = process.cwd(), topic = \"\", branch = \"\", buildchainSha = \"\", } = {}) | { cwd = process.cwd(), topic = \"\", branch = \"\", buildchainSha = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPaperWorkStartPlan } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-work.js:41` |\n| `createPaperWorkSubmitPlan` | function: function createPaperWorkSubmitPlan({ cwd = process.cwd(), pullRequests = [], pullRequestObservation = { ok: true }, buildchainSha = \"\", } = {}) | { cwd = process.cwd(), pullRequests = [], pullRequestObservation = { ok: true }, buildchainSha = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPaperWorkSubmitPlan } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-work.js:207` |\n| `discoverPaperFleet` | function: function discoverPaperFleet(root = process.cwd()) | root = process.cwd() | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { discoverPaperFleet } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-fleet.js:23` |\n| `executePaperNpmBootstrap` | function: function executePaperNpmBootstrap(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { executePaperNpmBootstrap } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:2840` |\n| `executePaperWorkStart` | function: function executePaperWorkStart(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { executePaperWorkStart } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-work.js:169` |\n| `executePaperWorkSubmitPush` | function: function executePaperWorkSubmitPush(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { executePaperWorkSubmitPush } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-work.js:357` |\n| `mergePaperAgentEntryInstructions` | function: function mergePaperAgentEntryInstructions(current = \"\", { developmentRef }) | current = \"\", { developmentRef } | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { mergePaperAgentEntryInstructions } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-agent-entry.js:61` |\n| `PAPER_AGENT_ENTRY_CONTRACT` | constant: const PAPER_AGENT_ENTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_AGENT_ENTRY_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-agent-entry.js:16` |\n| `PAPER_AGENT_ENTRY_SCHEMA_VERSION` | constant: const PAPER_AGENT_ENTRY_SCHEMA_VERSION | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_AGENT_ENTRY_SCHEMA_VERSION } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-agent-entry.js:17` |\n| `PAPER_AGENT_ENTRY_SECTION_END` | constant: const PAPER_AGENT_ENTRY_SECTION_END | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_AGENT_ENTRY_SECTION_END } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-agent-entry.js:20` |\n| `PAPER_AGENT_ENTRY_SECTION_START` | constant: const PAPER_AGENT_ENTRY_SECTION_START | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_AGENT_ENTRY_SECTION_START } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-agent-entry.js:18` |\n| `PAPER_ALPHA_PLAN_CONTRACT` | constant: const PAPER_ALPHA_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_ALPHA_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:90` |\n| `PAPER_BUILD_PLAN_CONTRACT` | constant: const PAPER_BUILD_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_BUILD_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:89` |\n| `PAPER_FLEET_AUDIT_CONTRACT` | constant: const PAPER_FLEET_AUDIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_FLEET_AUDIT_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-fleet.js:19` |\n| `PAPER_FLEET_UPDATE_PLAN_CONTRACT` | constant: const PAPER_FLEET_UPDATE_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_FLEET_UPDATE_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-fleet.js:20` |\n| `PAPER_MIGRATION_CONTRACT` | constant: const PAPER_MIGRATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_MIGRATION_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:82` |\n| `PAPER_NPM_BOOTSTRAP_CONTRACT` | constant: const PAPER_NPM_BOOTSTRAP_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_NPM_BOOTSTRAP_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:85` |\n| `PAPER_PATHS` | constant: const PAPER_PATHS | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_PATHS } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-repository.js:7` |\n| `PAPER_PREFLIGHT_CONTRACT` | constant: const PAPER_PREFLIGHT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_PREFLIGHT_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:83` |\n| `PAPER_PROVISIONING_CONTRACT` | constant: const PAPER_PROVISIONING_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_PROVISIONING_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:87` |\n| `PAPER_RESUME_PLAN_CONTRACT` | constant: const PAPER_RESUME_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_RESUME_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:91` |\n| `PAPER_SCAFFOLD_CONTRACT` | constant: const PAPER_SCAFFOLD_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_SCAFFOLD_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:81` |\n| `PAPER_STATE_ORDER` | constant: const PAPER_STATE_ORDER | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_STATE_ORDER } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:94` |\n| `PAPER_STATUS_CONTRACT` | constant: const PAPER_STATUS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_STATUS_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:84` |\n| `PAPER_VISIBILITY_CONTRACT` | constant: const PAPER_VISIBILITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_VISIBILITY_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:92` |\n| `PAPER_WORK_START_PLAN_CONTRACT` | constant: const PAPER_WORK_START_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_WORK_START_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-work.js:17` |\n| `PAPER_WORK_SUBMIT_PLAN_CONTRACT` | constant: const PAPER_WORK_SUBMIT_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_WORK_SUBMIT_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-work.js:19` |\n| `paperAgentEntryFiles` | function: function paperAgentEntryFiles({ cwd, buildchainVersion, buildchainSha, developmentRef = \"\", }) | { cwd, buildchainVersion, buildchainSha, developmentRef = \"\", } | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { paperAgentEntryFiles } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-agent-entry.js:150` |\n| `paperAgentEntryInstructions` | function: function paperAgentEntryInstructions({ developmentRef }) | { developmentRef } | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { paperAgentEntryInstructions } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-agent-entry.js:36` |\n| `paperFleetTransitionWorkspace` | function: function paperFleetTransitionWorkspace(workspaceText, lockText) | workspaceText, lockText | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { paperFleetTransitionWorkspace } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-fleet.js:290` |\n| `planPaperFleetUpdate` | function: function planPaperFleetUpdate(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { planPaperFleetUpdate } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-fleet.js:209` |\n| `planPaperMigration` | function: function planPaperMigration({ cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainSha = \"\", } = {}) | { cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainSha = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { planPaperMigration } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:1013` |\n| `planPaperScaffold` | function: function planPaperScaffold({ cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainRef = \"v3\", buildchainSha = \"\", name = path.basename(path.resolve(cwd)), title = \"\", packageName = \"\", repository = \"\", version = \"0.1.0-alpha.0\", siteBaseUrl = \"\", } = {}) | { cwd = process.cwd(), buildchainRoot = process.cwd(), buildchainVersion = \"\", buildchainRef = \"v3\", buildchainSha = \"\", name = path.basename(path.resolve(cwd)), title = \"\", packageName = \"\", repository = \"\", version = \"0.1.0-alpha.0\", siteBaseUrl = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { planPaperScaffold } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:702` |\n| `resolvePaperBuildchainSha` | function: function resolvePaperBuildchainSha(buildchainRoot, buildchainSha = \"\") | buildchainRoot, buildchainSha = \"\" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolvePaperBuildchainSha } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-agent-entry.js:177` |\n| `resolvePaperRepository` | function: function resolvePaperRepository(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolvePaperRepository } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-repository.js:133` |\n| `resolvePaperRuntimeGitSha` | function: function resolvePaperRuntimeGitSha(buildchainRoot, buildchainVersion = \"\") | buildchainRoot, buildchainVersion = \"\" | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolvePaperRuntimeGitSha } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:245` |\n| `writePaperFleetUpdate` | function: function writePaperFleetUpdate(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { writePaperFleetUpdate } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper-fleet.js:271` |\n| `writePaperMigration` | function: function writePaperMigration(plan) | plan | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { writePaperMigration } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:1129` |\n| `writePaperScaffold` | function: function writePaperScaffold(plan) | plan | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { writePaperScaffold } from \"@kungfu-tech/buildchain/paper\";` | `packages/core/paper.js:847` |\n\n## `@kungfu-tech/buildchain/publication-authority`\n\nTarget: `./packages/core/publication-authority.js`. Public symbols: 24.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `CONSUMER_PUBLICATION_DECISION_CONTRACT` | constant: const CONSUMER_PUBLICATION_DECISION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { CONSUMER_PUBLICATION_DECISION_CONTRACT } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:20` |\n| `createConsumerPublicationDecision` | function: function createConsumerPublicationDecision({ capability, gateAggregate, decision, predicateId, predicateDigest, evidence = {}, now = new Date(), } = {}) | { capability, gateAggregate, decision, predicateId, predicateDigest, evidence = {}, now = new Date(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createConsumerPublicationDecision } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:991` |\n| `createPublicationAdmission` | function: function createPublicationAdmission(input = {}) | input = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPublicationAdmission } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:236` |\n| `createPublicationArtifactManifestSet` | function: function createPublicationArtifactManifestSet({ repository, sourceSha, sourceTreeSha, manifests = [], payloads = [], } = {}) | { repository, sourceSha, sourceTreeSha, manifests = [], payloads = [], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationArtifactManifestSet } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:303` |\n| `createPublicationAuthorityRegistry` | function: function createPublicationAuthorityRegistry({ descriptors = [], workflows = [] } = {}) | { descriptors = [], workflows = [] } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationAuthorityRegistry } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:121` |\n| `createPublicationControlPlaneAudit` | function: function createPublicationControlPlaneAudit({ repository, workflowPath, publisherWorkflowPath, environment, facts = [], observedAt, expiresAt, } = {}) | { repository, workflowPath, publisherWorkflowPath, environment, facts = [], observedAt, expiresAt, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPublicationControlPlaneAudit } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:208` |\n| `createPublicationGateDecision` | function: function createPublicationGateDecision({ sourceSha, profile, required = false, rationale, policy = {}, } = {}) | { sourceSha, profile, required = false, rationale, policy = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createPublicationGateDecision } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:280` |\n| `createPublicationQualificationReceipt` | function: function createPublicationQualificationReceipt({ capability, gateAggregate, consumerDecision, now = new Date(), } = {}) | { capability, gateAggregate, consumerDecision, now = new Date(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPublicationQualificationReceipt } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:1035` |\n| `createRunnerProvenance` | function: function createRunnerProvenance({ runnerClass, os, architecture, imageDigest, measurementDigest, baselineDigest = \"\", toolchainDigest = \"\", cacheContractDigest = \"\", taskIsolationDigest = \"\", cleanBaselineProven = false, isolation = \"\", } = {}) | { runnerClass, os, architecture, imageDigest, measurementDigest, baselineDigest = \"\", toolchainDigest = \"\", cacheContractDigest = \"\", taskIsolationDigest = \"\", cleanBaselineProven = false, isolation = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createRunnerProvenance } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:166` |\n| `detectPublicationAuthoritySignals` | function: function detectPublicationAuthoritySignals(workflowText = \"\") | workflowText = \"\" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { detectPublicationAuthoritySignals } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:104` |\n| `PUBLICATION_ADMISSION_CONTRACT` | constant: const PUBLICATION_ADMISSION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ADMISSION_CONTRACT } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:10` |\n| `PUBLICATION_ARTIFACT_MANIFEST_SET_CONTRACT` | constant: const PUBLICATION_ARTIFACT_MANIFEST_SET_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_MANIFEST_SET_CONTRACT } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:24` |\n| `PUBLICATION_AUTHORITY_CLASSES` | constant: const PUBLICATION_AUTHORITY_CLASSES | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_AUTHORITY_CLASSES } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:27` |\n| `PUBLICATION_AUTHORITY_REGISTRY_CONTRACT` | constant: const PUBLICATION_AUTHORITY_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_AUTHORITY_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:8` |\n| `PUBLICATION_CAPABILITY_CONTRACT` | constant: const PUBLICATION_CAPABILITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_CAPABILITY_CONTRACT } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:12` |\n| `PUBLICATION_CONTROL_PLANE_AUDIT_CONTRACT` | constant: const PUBLICATION_CONTROL_PLANE_AUDIT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_CONTROL_PLANE_AUDIT_CONTRACT } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:16` |\n| `PUBLICATION_GATE_DECISION_CONTRACT` | constant: const PUBLICATION_GATE_DECISION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_GATE_DECISION_CONTRACT } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:18` |\n| `PUBLICATION_QUALIFICATION_RECEIPT_CONTRACT` | constant: const PUBLICATION_QUALIFICATION_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_QUALIFICATION_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:22` |\n| `publicationAuthorityDigest` | function: function publicationAuthorityDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { publicationAuthorityDigest } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:72` |\n| `publicationGateAggregateBindings` | function: function publicationGateAggregateBindings(gateAggregate) | gateAggregate | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { publicationGateAggregateBindings } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:408` |\n| `RUNNER_PROVENANCE_CLASSES` | constant: const RUNNER_PROVENANCE_CLASSES | none | value | Import does not declare a throw contract. | none-on-import | `import { RUNNER_PROVENANCE_CLASSES } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:36` |\n| `RUNNER_PROVENANCE_CONTRACT` | constant: const RUNNER_PROVENANCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RUNNER_PROVENANCE_CONTRACT } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:14` |\n| `verifyPublicationAdmission` | function: function verifyPublicationAdmission({ admission, registry, runnerProvenance, controlPlaneAudit, publicationEvidence, expected = {}, usedNonces = [], now = new Date(), } = {}) | { admission, registry, runnerProvenance, controlPlaneAudit, publicationEvidence, expected = {}, usedNonces = [], now = new Date(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyPublicationAdmission } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:791` |\n| `verifyPublicationQualificationReceipt` | function: function verifyPublicationQualificationReceipt({ receipt, capability, gateAggregate, expected = {}, usedNonces = [], now = new Date(), } = {}) | { receipt, capability, gateAggregate, expected = {}, usedNonces = [], now = new Date(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyPublicationQualificationReceipt } from \"@kungfu-tech/buildchain/publication-authority\";` | `packages/core/publication-authority.js:1096` |\n\n## `@kungfu-tech/buildchain/publication-control-plane-audit`\n\nTarget: `./packages/core/publication-control-plane-audit.js`. Public symbols: 4.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `BUILDCHAIN_RELEASE_RECONCILIATION_PATHS` | constant: const BUILDCHAIN_RELEASE_RECONCILIATION_PATHS | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_RELEASE_RECONCILIATION_PATHS } from \"@kungfu-tech/buildchain/publication-control-plane-audit\";` | `packages/core/publication-control-plane-audit.js:3` |\n| `evaluateBuildchainReleaseReconciliation` | function: function evaluateBuildchainReleaseReconciliation({ repository, publicationVersion, packageVersion, message, parentSha, changedPaths, } = {}) | { repository, publicationVersion, packageVersion, message, parentSha, changedPaths, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluateBuildchainReleaseReconciliation } from \"@kungfu-tech/buildchain/publication-control-plane-audit\";` | `packages/core/publication-control-plane-audit.js:41` |\n| `evaluatePublicationControlPlaneSnapshot` | function: function evaluatePublicationControlPlaneSnapshot({ repository, workflowPath, publisherWorkflowPath = workflowPath, environment, branch, packageName, publisherMode = \"npm-trusted-publisher\", requiredStatusCheck = \"check\", snapshot, observedAt, expiresAt, } = {}) | { repository, workflowPath, publisherWorkflowPath = workflowPath, environment, branch, packageName, publisherMode = \"npm-trusted-publisher\", requiredStatusCheck = \"check\", snapshot, observedAt, expiresAt, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluatePublicationControlPlaneSnapshot } from \"@kungfu-tech/buildchain/publication-control-plane-audit\";` | `packages/core/publication-control-plane-audit.js:75` |\n| `matchesGithubDeploymentPolicy` | function: function matchesGithubDeploymentPolicy(policy, { ref, refType = \"branch\" } = {}) | policy, { ref, refType = \"branch\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { matchesGithubDeploymentPolicy } from \"@kungfu-tech/buildchain/publication-control-plane-audit\";` | `packages/core/publication-control-plane-audit.js:31` |\n\n## `@kungfu-tech/buildchain/buildchain-publication-authority`\n\nTarget: `./packages/core/buildchain-publication-authority.js`. Public symbols: 2.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `buildchainPublicationAuthorityDescriptors` | function: function buildchainPublicationAuthorityDescriptors() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { buildchainPublicationAuthorityDescriptors } from \"@kungfu-tech/buildchain/buildchain-publication-authority\";` | `packages/core/buildchain-publication-authority.js:54` |\n| `createBuildchainPublicationAuthorityRegistry` | function: function createBuildchainPublicationAuthorityRegistry({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainPublicationAuthorityRegistry } from \"@kungfu-tech/buildchain/buildchain-publication-authority\";` | `packages/core/buildchain-publication-authority.js:79` |\n\n## `@kungfu-tech/buildchain/github-governance-authority`\n\nTarget: `./packages/core/github-governance-authority.js`. Public symbols: 22.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY` | constant: const BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:1363` |\n| `BUILDCHAIN_GITHUB_GOVERNANCE_PROTECTED_PATHS` | constant: const BUILDCHAIN_GITHUB_GOVERNANCE_PROTECTED_PATHS | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_GITHUB_GOVERNANCE_PROTECTED_PATHS } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:1365` |\n| `codeownersForPath` | function: function codeownersForPath(source, candidatePath) | source, candidatePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { codeownersForPath } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:417` |\n| `compileEffectiveGithubGovernancePolicy` | function: function compileEffectiveGithubGovernancePolicy({ branch, defaultBranch, protectedBranch = false, protection, rulesets = [], } = {}) | { branch, defaultBranch, protectedBranch = false, protection, rulesets = [], } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { compileEffectiveGithubGovernancePolicy } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:311` |\n| `createBuildchainGithubGovernanceAuthority` | function: function createBuildchainGithubGovernanceAuthority() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainGithubGovernanceAuthority } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:450` |\n| `createGithubGovernanceRolloutPlan` | function: function createGithubGovernanceRolloutPlan({ repository, targetRef, inventory, rollbackSnapshot, rollbackProtectionExists = true, desiredProtection, } = {}) | { repository, targetRef, inventory, rollbackSnapshot, rollbackProtectionExists = true, desiredProtection, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGithubGovernanceRolloutPlan } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:932` |\n| `createGithubRulesetBypassRolloutPlan` | function: function createGithubRulesetBypassRolloutPlan({ repository, rulesetId, inventory, rollbackSnapshot, } = {}) | { repository, rulesetId, inventory, rollbackSnapshot, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGithubRulesetBypassRolloutPlan } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:1110` |\n| `createGithubRulesetGovernanceRolloutPlan` | function: function createGithubRulesetGovernanceRolloutPlan({ repository, targetRef, rulesetId, rulesetName, inventory, rollbackSnapshot, desiredProtection, } = {}) | { repository, targetRef, rulesetId, rulesetName, inventory, rollbackSnapshot, desiredProtection, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGithubRulesetGovernanceRolloutPlan } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:1189` |\n| `evaluateCodeownersAuthority` | function: function evaluateCodeownersAuthority({ source = \"\", sourcePath = \"\", reviewAuthority = \"kungfu-origin\", protectedPaths = PROTECTED_AUTHORITY_PATHS, } = {}) | { source = \"\", sourcePath = \"\", reviewAuthority = \"kungfu-origin\", protectedPaths = PROTECTED_AUTHORITY_PATHS, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluateCodeownersAuthority } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:425` |\n| `evaluateGithubGovernanceSnapshot` | function: function evaluateGithubGovernanceSnapshot({ descriptor = createBuildchainGithubGovernanceAuthority(), repository, targetRef, organizationPlan, codeowners, effectivePolicy, memberships, apiEvidence = {}, observedAt, expiresAt, verifier = {}, } = {}) | { descriptor = createBuildchainGithubGovernanceAuthority(), repository, targetRef, organizationPlan, codeowners, effectivePolicy, memberships, apiEvidence = {}, observedAt, expiresAt, verifier = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { evaluateGithubGovernanceSnapshot } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:694` |\n| `GITHUB_GOVERNANCE_AUTHORITY_CONTRACT` | constant: const GITHUB_GOVERNANCE_AUTHORITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_GOVERNANCE_AUTHORITY_CONTRACT } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:3` |\n| `GITHUB_GOVERNANCE_RECEIPT_CONTRACT` | constant: const GITHUB_GOVERNANCE_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_GOVERNANCE_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:5` |\n| `GITHUB_GOVERNANCE_ROLLOUT_CONTRACT` | constant: const GITHUB_GOVERNANCE_ROLLOUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_GOVERNANCE_ROLLOUT_CONTRACT } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:7` |\n| `GITHUB_GOVERNANCE_RULESET_ROLLOUT_CONTRACT` | constant: const GITHUB_GOVERNANCE_RULESET_ROLLOUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_GOVERNANCE_RULESET_ROLLOUT_CONTRACT } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:9` |\n| `githubGovernanceDigest` | function: function githubGovernanceDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { githubGovernanceDigest } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:163` |\n| `githubRepositoryIdentityRoot` | function: function githubRepositoryIdentityRoot({ provider = \"github\", providerRepositoryId, } = {}) | { provider = \"github\", providerRepositoryId, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { githubRepositoryIdentityRoot } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:540` |\n| `normalizeGithubBranchProtectionSnapshot` | function: function normalizeGithubBranchProtectionSnapshot(protection = {}) | protection = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { normalizeGithubBranchProtectionSnapshot } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:1025` |\n| `normalizeGithubRulesetSnapshot` | function: function normalizeGithubRulesetSnapshot(ruleset = {}) | ruleset = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { normalizeGithubRulesetSnapshot } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:1095` |\n| `parseCodeowners` | function: function parseCodeowners(source) | source | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { parseCodeowners } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:401` |\n| `resolveGithubGovernanceTargetPolicy` | function: function resolveGithubGovernanceTargetPolicy({ descriptor = BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY, repository, targetRef, } = {}) | { descriptor = BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY, repository, targetRef, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveGithubGovernanceTargetPolicy } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:607` |\n| `resolveGithubGovernanceTargetRefs` | function: function resolveGithubGovernanceTargetRefs({ descriptor = BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY, repository, availableRefs = [], requestedTargetRef = \"\", } = {}) | { descriptor = BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY, repository, availableRefs = [], requestedTargetRef = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveGithubGovernanceTargetRefs } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:630` |\n| `verifyGithubGovernanceReceipt` | function: function verifyGithubGovernanceReceipt(receipt, { expectedOrganization, expectedRepository, expectedRepositoryIdentityRoot, expectedTargetRef, expectedPolicyRoot, expectedVerifierSourceRevision, now = new Date().toISOString(), } = {}) | receipt, { expectedOrganization, expectedRepository, expectedRepositoryIdentityRoot, expectedTargetRef, expectedPolicyRoot, expectedVerifierSourceRevision, now = new Date().toISOString(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyGithubGovernanceReceipt } from \"@kungfu-tech/buildchain/github-governance-authority\";` | `packages/core/github-governance-authority.js:884` |\n\n## `@kungfu-tech/buildchain/kfd-gate`\n\nTarget: `./packages/core/kfd-gate.js`. Public symbols: 19.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `BUILDCHAIN_JSON_FORMATTING_POLICY` | constant: const BUILDCHAIN_JSON_FORMATTING_POLICY | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_JSON_FORMATTING_POLICY } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:14` |\n| `createKfd1ReleaseGateEvidence` | function: function createKfd1ReleaseGateEvidence({ cwd = process.cwd(), artifactRoot = \"\", artifacts = [], witnesses = [], verifiedAt = new Date().toISOString(), metadata = resolveKfd1Metadata(), } = {}) | { cwd = process.cwd(), artifactRoot = \"\", artifacts = [], witnesses = [], verifiedAt = new Date().toISOString(), metadata = resolveKfd1Metadata(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfd1ReleaseGateEvidence } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:977` |\n| `createKfd3CollaborationInterfaceReleaseGateEvidence` | function: function createKfd3CollaborationInterfaceReleaseGateEvidence({ prebuildWitnesses = [], artifactWitnesses = [], prebuildWitnessMetas = [], artifactWitnessMetas = [], artifactCommandMeta = undefined, verifiedAt = new Date().toISOString(), metadata = resolveKfd3Metadata(), } = {}) | { prebuildWitnesses = [], artifactWitnesses = [], prebuildWitnessMetas = [], artifactWitnessMetas = [], artifactCommandMeta = undefined, verifiedAt = new Date().toISOString(), metadata = resolveKfd3Metadata(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfd3CollaborationInterfaceReleaseGateEvidence } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:1132` |\n| `KFD1_RELEASE_GATE_CONTRACT` | constant: const KFD1_RELEASE_GATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD1_RELEASE_GATE_CONTRACT } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:9` |\n| `KFD1_WITNESS_SET_CONTRACT` | constant: const KFD1_WITNESS_SET_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD1_WITNESS_SET_CONTRACT } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:10` |\n| `KFD3_ARTIFACT_WITNESS_CONTRACT` | constant: const KFD3_ARTIFACT_WITNESS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_ARTIFACT_WITNESS_CONTRACT } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:13` |\n| `KFD3_PREBUILD_WITNESS_CONTRACT` | constant: const KFD3_PREBUILD_WITNESS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_PREBUILD_WITNESS_CONTRACT } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:12` |\n| `KFD3_RELEASE_GATE_CONTRACT` | constant: const KFD3_RELEASE_GATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_RELEASE_GATE_CONTRACT } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:11` |\n| `normalizeKfd1ContractWorldWitness` | function: function normalizeKfd1ContractWorldWitness(witness, { metadata = resolveKfd1Metadata() } = {}) | witness, { metadata = resolveKfd1Metadata() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfd1ContractWorldWitness } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:897` |\n| `normalizeKfd3CollaborationInterfaceArtifactWitness` | function: function normalizeKfd3CollaborationInterfaceArtifactWitness(witness, { metadata = resolveKfd3Metadata() } = {}) | witness, { metadata = resolveKfd3Metadata() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfd3CollaborationInterfaceArtifactWitness } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:738` |\n| `normalizeKfd3CollaborationInterfacePrebuildWitness` | function: function normalizeKfd3CollaborationInterfacePrebuildWitness(witness, { metadata = resolveKfd3Metadata() } = {}) | witness, { metadata = resolveKfd3Metadata() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfd3CollaborationInterfacePrebuildWitness } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:667` |\n| `resolveKfd1Metadata` | function: function resolveKfd1Metadata() | none | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveKfd1Metadata } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:89` |\n| `resolveKfd2Metadata` | function: function resolveKfd2Metadata({ requireTrustTaxonomy = false } = {}) | { requireTrustTaxonomy = false } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveKfd2Metadata } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:173` |\n| `resolveKfd3Metadata` | function: function resolveKfd3Metadata({ requireSchemas = false } = {}) | { requireSchemas = false } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveKfd3Metadata } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:128` |\n| `sha256File` | function: function sha256File(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sha256File } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:54` |\n| `sha256Json` | function: function sha256Json(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { sha256Json } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:50` |\n| `validateKfd1ReleaseGateEvidence` | function: function validateKfd1ReleaseGateEvidence(section, { metadata = resolveKfd1Metadata() } = {}) | section, { metadata = resolveKfd1Metadata() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfd1ReleaseGateEvidence } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:1337` |\n| `validateKfd2TrustTaxonomyEntry` | function: function validateKfd2TrustTaxonomyEntry(entry, { kind = \"residualRisk\", label = kind, metadata = resolveKfd2Metadata({ requireTrustTaxonomy: true }), extensionRequests = [], } = {}) | entry, { kind = \"residualRisk\", label = kind, metadata = resolveKfd2Metadata({ requireTrustTaxonomy: true }), extensionRequests = [], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateKfd2TrustTaxonomyEntry } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:506` |\n| `validateKfd3CollaborationInterfaceReleaseGateEvidence` | function: function validateKfd3CollaborationInterfaceReleaseGateEvidence(section, { metadata = resolveKfd3Metadata() } = {}) | section, { metadata = resolveKfd3Metadata() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfd3CollaborationInterfaceReleaseGateEvidence } from \"@kungfu-tech/buildchain/kfd-gate\";` | `packages/core/kfd-gate.js:1470` |\n\n## `@kungfu-tech/buildchain/release-candidate`\n\nTarget: `./packages/core/release-candidate.js`. Public symbols: 5.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `createReleaseCandidatePassport` | function: function createReleaseCandidatePassport({ repository = \"\", pullRequest = {}, targetChannel = \"\", version = \"\", sourceHeadSha = \"\", baseSha = \"\", mergeRefSha = \"\", sourceTreeHash = \"\", buildSummary = {}, buildchain = {}, gateAggregate = undefined, familyEvidence = undefined, controllerReceipts = [], controllerReceiptReferences = [], workflow = {}, createdAt = nowIso(), } = {}) | { repository = \"\", pullRequest = {}, targetChannel = \"\", version = \"\", sourceHeadSha = \"\", baseSha = \"\", mergeRefSha = \"\", sourceTreeHash = \"\", buildSummary = {}, buildchain = {}, gateAggregate = undefined, familyEvidence = undefined, controllerReceipts = [], controllerReceiptReferences = [], workflow = {}, createdAt = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleaseCandidatePassport } from \"@kungfu-tech/buildchain/release-candidate\";` | `packages/core/release-candidate.js:310` |\n| `FAMILY_RELEASE_EVIDENCE_CONTRACT` | constant: const FAMILY_RELEASE_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { FAMILY_RELEASE_EVIDENCE_CONTRACT } from \"@kungfu-tech/buildchain/release-candidate\";` | `packages/core/release-candidate.js:5` |\n| `RELEASE_CANDIDATE_PASSPORT_CONTRACT` | constant: const RELEASE_CANDIDATE_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_CANDIDATE_PASSPORT_CONTRACT } from \"@kungfu-tech/buildchain/release-candidate\";` | `packages/core/release-candidate.js:4` |\n| `sha256Json` | function: function sha256Json(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sha256Json } from \"@kungfu-tech/buildchain/release-candidate\";` | `packages/core/release-candidate.js:90` |\n| `validateReleaseCandidatePassport` | function: function validateReleaseCandidatePassport({ passport, repository = \"\", targetChannel = \"\", version = \"\", sourceHeadSha = \"\", buildSummary = undefined, requirePlatforms = true, requireFamilyEvidence = false, familyEvidenceRoot = \"\", familyInitiativeId = \"\", familyAssignmentId = \"\", } = {}) | { passport, repository = \"\", targetChannel = \"\", version = \"\", sourceHeadSha = \"\", buildSummary = undefined, requirePlatforms = true, requireFamilyEvidence = false, familyEvidenceRoot = \"\", familyInitiativeId = \"\", familyAssignmentId = \"\", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateReleaseCandidatePassport } from \"@kungfu-tech/buildchain/release-candidate\";` | `packages/core/release-candidate.js:404` |\n\n## `@kungfu-tech/buildchain/stable-candidate-ledger`\n\nTarget: `./packages/core/stable-candidate-ledger.js`. Public symbols: 11.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `createStableCandidateLedger` | function: function createStableCandidateLedger({ repository, targetBranch, now = new Date().toISOString() } = {}) | { repository, targetBranch, now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createStableCandidateLedger } from \"@kungfu-tech/buildchain/stable-candidate-ledger\";` | `packages/core/stable-candidate-ledger.js:56` |\n| `markStableCandidatePromoted` | function: function markStableCandidatePromoted(ledgerInput, versionInput, { stableTag = \"\", stableSha = \"\", now = new Date().toISOString() } = {}) | ledgerInput, versionInput, { stableTag = \"\", stableSha = \"\", now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { markStableCandidatePromoted } from \"@kungfu-tech/buildchain/stable-candidate-ledger\";` | `packages/core/stable-candidate-ledger.js:229` |\n| `normalizeStableCandidateLedger` | function: function normalizeStableCandidateLedger(input, expected = {}) | input, expected = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeStableCandidateLedger } from \"@kungfu-tech/buildchain/stable-candidate-ledger\";` | `packages/core/stable-candidate-ledger.js:76` |\n| `qualifyStableCandidate` | function: function qualifyStableCandidate(ledgerInput, observation, { minimumSoakSeconds = 3600, now = new Date().toISOString() } = {}) | ledgerInput, observation, { minimumSoakSeconds = 3600, now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { qualifyStableCandidate } from \"@kungfu-tech/buildchain/stable-candidate-ledger\";` | `packages/core/stable-candidate-ledger.js:139` |\n| `registerStableCandidate` | function: function registerStableCandidate(ledgerInput, candidateInput, { now = new Date().toISOString() } = {}) | ledgerInput, candidateInput, { now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { registerStableCandidate } from \"@kungfu-tech/buildchain/stable-candidate-ledger\";` | `packages/core/stable-candidate-ledger.js:106` |\n| `revokeStableCandidate` | function: function revokeStableCandidate(ledgerInput, versionInput, { reason, actor = \"\", now = new Date().toISOString() } = {}) | ledgerInput, versionInput, { reason, actor = \"\", now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { revokeStableCandidate } from \"@kungfu-tech/buildchain/stable-candidate-ledger\";` | `packages/core/stable-candidate-ledger.js:185` |\n| `selectStableCandidate` | function: function selectStableCandidate(ledgerInput, { releaseNow = \"\", now = new Date().toISOString() } = {}) | ledgerInput, { releaseNow = \"\", now = new Date().toISOString() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { selectStableCandidate } from \"@kungfu-tech/buildchain/stable-candidate-ledger\";` | `packages/core/stable-candidate-ledger.js:206` |\n| `setStableCandidateHold` | function: function setStableCandidateHold(ledgerInput, enabled, { reason = \"\", now = new Date().toISOString() } = {}) | ledgerInput, enabled, { reason = \"\", now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { setStableCandidateHold } from \"@kungfu-tech/buildchain/stable-candidate-ledger\";` | `packages/core/stable-candidate-ledger.js:198` |\n| `STABLE_CANDIDATE_LEDGER_CONTRACT` | constant: const STABLE_CANDIDATE_LEDGER_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { STABLE_CANDIDATE_LEDGER_CONTRACT } from \"@kungfu-tech/buildchain/stable-candidate-ledger\";` | `packages/core/stable-candidate-ledger.js:1` |\n| `STABLE_CANDIDATE_STATES` | constant: const STABLE_CANDIDATE_STATES | none | value | Import does not declare a throw contract. | none-on-import | `import { STABLE_CANDIDATE_STATES } from \"@kungfu-tech/buildchain/stable-candidate-ledger\";` | `packages/core/stable-candidate-ledger.js:2` |\n| `stableCandidatePromotionRefs` | function: function stableCandidatePromotionRefs(candidateInput, targetBranch) | candidateInput, targetBranch | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { stableCandidatePromotionRefs } from \"@kungfu-tech/buildchain/stable-candidate-ledger\";` | `packages/core/stable-candidate-ledger.js:264` |\n\n## `@kungfu-tech/buildchain/release-passport`\n\nTarget: `./packages/core/release-passport.js`. Public symbols: 23.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `AGENT_INDEX_CONTRACT` | constant: const AGENT_INDEX_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { AGENT_INDEX_CONTRACT } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:31` |\n| `ARTIFACT_EVIDENCE_CONTRACT` | constant: const ARTIFACT_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_EVIDENCE_CONTRACT } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:29` |\n| `collectGitHubReleasePassport` | function: function collectGitHubReleasePassport({ cwd = process.cwd(), tag = \"\", repository = process.env.GITHUB_REPOSITORY \\|\\| \"\", sourceSha = process.env.GITHUB_SHA \\|\\| \"\", line = \"\", outputDir = \".buildchain/release-passport\", assetsJson = \"\", assetsDir = \"\", releaseJson = \"\", productName = \"Buildchain\", packageName = \"@kungfu-tech/buildchain\", packageVersion = \"\", packageSetJson = \"\", publishEvidenceJson = \"\", trustedPublishingJson = \"\", transactionJson = \"\", anchorManifestJson = \"\", versionMaterialJson = \"\", impactJson = \"\", buildSummaryJson = \"\", buildFactsJsons = [], platformManifestJsons = [], distTagEvidenceJson = \"\", kfd1WitnessJsons = [], kfd2ClaimJsons = [], kfd3PrebuildWitnessJsons = [], kfd3ArtifactWitnessJsons = [], kfd3ArtifactVerifyCommand = \"\", kfdSupportMatrixJson = \"\", kfdProductGateJsons = [], invariantPassportJsons = [], invariantPassportCommand = \"\", releaseEvidenceJsons = [], kfdAgentHubEvidenceJson = \"\", controllerReceiptReferences = [], githubArtifactAttestationPolicyJsons = [], basePassportJson = \"\", requireBaseKfd = false, releaseJsonExtra = \"\", publishJson = \"\", workflow = {}, checkedAt = \"\", } = {}) | { cwd = process.cwd(), tag = \"\", repository = process.env.GITHUB_REPOSITORY \\|\\| \"\", sourceSha = process.env.GITHUB_SHA \\|\\| \"\", line = \"\", outputDir = \".buildchain/release-passport\", assetsJson = \"\", assetsDir = \"\", releaseJson = \"\", productName = \"Buildchain\", packageName = \"@kungfu-tech/buildchain\", packageVersion = \"\", packageSetJson = \"\", publishEvidenceJson = \"\", trustedPublishingJson = \"\", transactionJson = \"\", anchorManifestJson = \"\", versionMaterialJson = \"\", impactJson = \"\", buildSummaryJson = \"\", buildFactsJsons = [], platformManifestJsons = [], distTagEvidenceJson = \"\", kfd1WitnessJsons = [], kfd2ClaimJsons = [], kfd3PrebuildWitnessJsons = [], kfd3ArtifactWitnessJsons = [], kfd3ArtifactVerifyCommand = \"\", kfdSupportMatrixJson = \"\", kfdProductGateJsons = [], invariantPassportJsons = [], invariantPassportCommand = \"\", releaseEvidenceJsons = [], kfdAgentHubEvidenceJson = \"\", controllerReceiptReferences = [], githubArtifactAttestationPolicyJsons = [], basePassportJson = \"\", requireBaseKfd = false, releaseJsonExtra = \"\", publishJson = \"\", workflow = {}, checkedAt = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { collectGitHubReleasePassport } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:1488` |\n| `createArtifactEvidence` | function: function createArtifactEvidence({ assets = [], repository = \"\", tag = \"\", sourceSha = \"\", workflow = {} } = {}) | { assets = [], repository = \"\", tag = \"\", sourceSha = \"\", workflow = {} } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createArtifactEvidence } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:1158` |\n| `createInvariantPassportGate` | function: function createInvariantPassportGate(passportMetas = []) | passportMetas = [] | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createInvariantPassportGate } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:201` |\n| `createReleaseCheckReport` | function: function createReleaseCheckReport({ passport, artifactEvidence, publishEvidence, impact, agentIndex, productMechanism, kfdAgentHubEvidence, kfdSupportEvidence, releaseEvidenceDocuments = [], checkedAt = nowIso(), } = {}) | { passport, artifactEvidence, publishEvidence, impact, agentIndex, productMechanism, kfdAgentHubEvidence, kfdSupportEvidence, releaseEvidenceDocuments = [], checkedAt = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleaseCheckReport } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:2628` |\n| `createReleasePassport` | function: function createReleasePassport({ cwd = process.cwd(), repository = \"\", tag = \"\", sourceSha = \"\", line = \"\", productName = \"Buildchain\", packageName = \"@kungfu-tech/buildchain\", packageVersion = \"\", productMechanismPath = \"product-mechanism.json\", artifactEvidencePath = \"artifact-evidence.json\", impactPath = \"impact.json\", agentIndexPath = \"agent-index.json\", checkReportPath = \"check-report.json\", publishEvidencePath = \"\", transactionStatePath = \"\", assets = [], packageSet = undefined, anchorManifest = undefined, versionMaterial = undefined, publishEvidence = undefined, trustedPublishing = undefined, transaction = undefined, buildSummary = undefined, buildFacts = [], platformArtifactManifests = [], distTagPromotionEvidence = undefined, release = {}, publish = {}, impact = undefined, workflow = {}, kfd1 = undefined, kfd2Claims = [], kfd3 = undefined, kfdSupport = undefined, kfdSupportEvidencePath = \"\", invariantPassports = undefined, releaseEvidence = [], kfdAgentHubEvidence = undefined, kfdAgentHubEvidencePath = \"\", controllerReceipts = [], controllerReceiptReferences = [], githubArtifactAttestations = [], checkedAt = \"\", } = {}) | { cwd = process.cwd(), repository = \"\", tag = \"\", sourceSha = \"\", line = \"\", productName = \"Buildchain\", packageName = \"@kungfu-tech/buildchain\", packageVersion = \"\", productMechanismPath = \"product-mechanism.json\", artifactEvidencePath = \"artifact-evidence.json\", impactPath = \"impact.json\", agentIndexPath = \"agent-index.json\", checkReportPath = \"check-report.json\", publishEvidencePath = \"\", transactionStatePath = \"\", assets = [], packageSet = undefined, anchorManifest = undefined, versionMaterial = undefined, publishEvidence = undefined, trustedPublishing = undefined, transaction = undefined, buildSummary = undefined, buildFacts = [], platformArtifactManifests = [], distTagPromotionEvidence = undefined, release = {}, publish = {}, impact = undefined, workflow = {}, kfd1 = undefined, kfd2Claims = [], kfd3 = undefined, kfdSupport = undefined, kfdSupportEvidencePath = \"\", invariantPassports = undefined, releaseEvidence = [], kfdAgentHubEvidence = undefined, kfdAgentHubEvidencePath = \"\", controllerReceipts = [], controllerReceiptReferences = [], githubArtifactAttestations = [], checkedAt = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleasePassport } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:1214` |\n| `explainReleasePassport` | function: async function explainReleasePassport({ passportLocation, forAudience = \"human\" } = {}) | { passportLocation, forAudience = \"human\" } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { explainReleasePassport } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:2812` |\n| `IMPACT_LEDGER_CONTRACT` | constant: const IMPACT_LEDGER_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { IMPACT_LEDGER_CONTRACT } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:30` |\n| `INVARIANT_PASSPORT_GATE_CONTRACT` | constant: const INVARIANT_PASSPORT_GATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { INVARIANT_PASSPORT_GATE_CONTRACT } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:37` |\n| `KFD_AGENT_HUB_RELEASE_EVIDENCE_CONTRACT` | constant: const KFD_AGENT_HUB_RELEASE_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_RELEASE_EVIDENCE_CONTRACT } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:38` |\n| `KFD2_RELEASE_TRUST_PASSPORT_CONTRACT` | constant: const KFD2_RELEASE_TRUST_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_RELEASE_TRUST_PASSPORT_CONTRACT } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:35` |\n| `KFD2_TRUST_PROOF_CONTRACT` | constant: const KFD2_TRUST_PROOF_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_TRUST_PROOF_CONTRACT } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:36` |\n| `makeReleasePassportFixtureAssets` | function: function makeReleasePassportFixtureAssets(dir) | dir | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { makeReleasePassportFixtureAssets } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:2841` |\n| `PRODUCT_MECHANISM_CONTRACT` | constant: const PRODUCT_MECHANISM_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PRODUCT_MECHANISM_CONTRACT } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:32` |\n| `readJsonFromLocation` | function: async function readJsonFromLocation(location, redirectCount = 0, { timeoutMs = 15_000 } = {}) | location, redirectCount = 0, { timeoutMs = 15_000 } = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readJsonFromLocation } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:2694` |\n| `RELEASE_CHECK_REPORT_CONTRACT` | constant: const RELEASE_CHECK_REPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_CHECK_REPORT_CONTRACT } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:33` |\n| `RELEASE_EVIDENCE_ATTACHMENT_CONTRACT` | constant: const RELEASE_EVIDENCE_ATTACHMENT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_EVIDENCE_ATTACHMENT_CONTRACT } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:34` |\n| `RELEASE_PASSPORT_CONTRACT` | constant: const RELEASE_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PASSPORT_CONTRACT } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:28` |\n| `sha256File` | function: function sha256File(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write, subprocess | `import { sha256File } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:216` |\n| `sha256Text` | function: function sha256Text(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sha256Text } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:138` |\n| `validateKnownReleasePassportContracts` | function: function validateKnownReleasePassportContracts() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKnownReleasePassportContracts } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:2853` |\n| `verifyReleasePassport` | function: async function verifyReleasePassport({ passportLocation, artifactEvidenceLocation = \"\", publishEvidenceLocation = \"\", impactLocation = \"\", agentIndexLocation = \"\", productMechanismLocation = \"\", kfdAgentHubEvidenceLocation = \"\", kfdSupportEvidenceLocation = \"\", checkedAt = nowIso(), } = {}) | { passportLocation, artifactEvidenceLocation = \"\", publishEvidenceLocation = \"\", impactLocation = \"\", agentIndexLocation = \"\", productMechanismLocation = \"\", kfdAgentHubEvidenceLocation = \"\", kfdSupportEvidenceLocation = \"\", checkedAt = nowIso(), } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyReleasePassport } from \"@kungfu-tech/buildchain/release-passport\";` | `packages/core/release-passport.js:2743` |\n\n## `@kungfu-tech/buildchain/release-passport-contract`\n\nTarget: `./packages/core/release-passport-contract.js`. Public symbols: 5.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `createReleasePassportCheckManifest` | function: function createReleasePassportCheckManifest({ standards = kfdStandards } = {}) | { standards = kfdStandards } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleasePassportCheckManifest } from \"@kungfu-tech/buildchain/release-passport-contract\";` | `packages/core/release-passport-contract.js:147` |\n| `RELEASE_PASSPORT_CHECK_MANIFEST_CONTRACT` | constant: const RELEASE_PASSPORT_CHECK_MANIFEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PASSPORT_CHECK_MANIFEST_CONTRACT } from \"@kungfu-tech/buildchain/release-passport-contract\";` | `packages/core/release-passport-contract.js:9` |\n| `RELEASE_PASSPORT_SCHEMA` | constant: const RELEASE_PASSPORT_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PASSPORT_SCHEMA } from \"@kungfu-tech/buildchain/release-passport-contract\";` | `packages/core/release-passport-contract.js:16` |\n| `RELEASE_PASSPORT_SCHEMA_ID` | constant: const RELEASE_PASSPORT_SCHEMA_ID | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PASSPORT_SCHEMA_ID } from \"@kungfu-tech/buildchain/release-passport-contract\";` | `packages/core/release-passport-contract.js:7` |\n| `validateReleasePassportSchema` | function: function validateReleasePassportSchema(passport) | passport | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateReleasePassportSchema } from \"@kungfu-tech/buildchain/release-passport-contract\";` | `packages/core/release-passport-contract.js:256` |\n\n## `@kungfu-tech/buildchain/release-propagation`\n\nTarget: `./packages/core/release-propagation.js`. Public symbols: 42.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `claimReleasePropagationWork` | function: function claimReleasePropagationWork({ work, expectedWorkRoot, authority, familyState, } = {}) | { work, expectedWorkRoot, authority, familyState, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { claimReleasePropagationWork } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-work-transitions.js:17` |\n| `classifyReleasePropagationCondition` | function: function classifyReleasePropagationCondition(condition) | condition | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { classifyReleasePropagationCondition } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-agent-entry.js:171` |\n| `completeReleasePropagationWork` | function: function completeReleasePropagationWork({ work, expectedWorkRoot, receipt, completionDecision, } = {}) | { work, expectedWorkRoot, receipt, completionDecision, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { completeReleasePropagationWork } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-work-transitions.js:110` |\n| `createManualUpstreamPickupCapture` | function: function createManualUpstreamPickupCapture({ plan, expectedDownstreamBaseSha, }) | { plan, expectedDownstreamBaseSha, } | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createManualUpstreamPickupCapture } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-pickup.js:361` |\n| `createManualUpstreamPickupPlan` | function: function createManualUpstreamPickupPlan({ config: configInput, sourceId, channel, currentVersion, upstreamRelease, }) | { config: configInput, sourceId, channel, currentVersion, upstreamRelease, } | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createManualUpstreamPickupPlan } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-pickup.js:303` |\n| `createPackageReleasePropagationCapture` | function: function createPackageReleasePropagationCapture({ config: configInput, upstreamRelease: upstreamReleaseInput, expectedBaseShas = {}, } = {}) | { config: configInput, upstreamRelease: upstreamReleaseInput, expectedBaseShas = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createPackageReleasePropagationCapture } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-capture.js:101` |\n| `createReleasePropagationLock` | function: function createReleasePropagationLock({ graph, edge, sourceNode, targetNode, upstreamRelease, downstreamChannel, } = {}) | { graph, edge, sourceNode, targetNode, upstreamRelease, downstreamChannel, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleasePropagationLock } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation.js:199` |\n| `createReleasePropagationPushPlan` | function: function createReleasePropagationPushPlan({ work: workInput, expectedWorkRoot, repositoryState: stateInput, } = {}) | { work: workInput, expectedWorkRoot, repositoryState: stateInput, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { createReleasePropagationPushPlan } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-push.js:77` |\n| `createReleasePropagationReceipt` | function: function createReleasePropagationReceipt({ plan, target = \"\", lockResult, prOutcome, stagingState = \"pending\", productionState = \"not-requested\", observedAt = \"\", } = {}) | { plan, target = \"\", lockResult, prOutcome, stagingState = \"pending\", productionState = \"not-requested\", observedAt = \"\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleasePropagationReceipt } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation.js:371` |\n| `createReleasePropagationStageReceipt` | function: function createReleasePropagationStageReceipt({ work, stage, outcome = \"success\", observedAt, actor, summary, evidence, failure = null, } = {}) | { work, stage, outcome = \"success\", observedAt, actor, summary, evidence, failure = null, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleasePropagationStageReceipt } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-work.js:214` |\n| `createReleasePropagationWork` | function: function createReleasePropagationWork({ plan, target = \"\", workContext, expectedDownstreamBaseSha, } = {}) | { plan, target = \"\", workContext, expectedDownstreamBaseSha, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleasePropagationWork } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-work.js:111` |\n| `executeReleasePropagationPush` | function: function executeReleasePropagationPush({ work, expectedWorkRoot, cwd = process.cwd(), remote = \"origin\", } = {}) | { work, expectedWorkRoot, cwd = process.cwd(), remote = \"origin\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { executeReleasePropagationPush } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-push.js:231` |\n| `inspectReleasePropagationPushState` | function: function inspectReleasePropagationPushState({ work: workInput, cwd = process.cwd(), remote = \"origin\", } = {}) | { work: workInput, cwd = process.cwd(), remote = \"origin\", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { inspectReleasePropagationPushState } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-push.js:174` |\n| `MANUAL_UPSTREAM_PICKUP_CONFIG_CONTRACT` | constant: const MANUAL_UPSTREAM_PICKUP_CONFIG_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { MANUAL_UPSTREAM_PICKUP_CONFIG_CONTRACT } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-pickup.js:16` |\n| `MANUAL_UPSTREAM_PICKUP_PLAN_CONTRACT` | constant: const MANUAL_UPSTREAM_PICKUP_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { MANUAL_UPSTREAM_PICKUP_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-pickup.js:18` |\n| `normalizeManualUpstreamPickupConfig` | function: function normalizeManualUpstreamPickupConfig(input) | input | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeManualUpstreamPickupConfig } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-pickup.js:118` |\n| `normalizePackageReleasePropagationConfig` | function: function normalizePackageReleasePropagationConfig(input) | input | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizePackageReleasePropagationConfig } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-capture.js:63` |\n| `normalizeReleasePropagationGraph` | function: function normalizeReleasePropagationGraph(input) | input | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeReleasePropagationGraph } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation.js:163` |\n| `normalizeSiteUpstreamIntent` | function: function normalizeSiteUpstreamIntent(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeSiteUpstreamIntent } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-agent-entry.js:77` |\n| `PACKAGE_RELEASE_PROPAGATION_CONFIG_CONTRACT` | constant: const PACKAGE_RELEASE_PROPAGATION_CONFIG_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PACKAGE_RELEASE_PROPAGATION_CONFIG_CONTRACT } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-capture.js:17` |\n| `planReleasePropagation` | function: function planReleasePropagation({ graph: graphInput, upstreamRelease: releaseInput, sourceNode = \"\" } = {}) | { graph: graphInput, upstreamRelease: releaseInput, sourceNode = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { planReleasePropagation } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation.js:249` |\n| `planSiteUpstreamAgentEntry` | function: function planSiteUpstreamAgentEntry({ sourceId: sourceInput, channel = \"\", handoffWork = null, } = {}) | { sourceId: sourceInput, channel = \"\", handoffWork = null, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { planSiteUpstreamAgentEntry } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-agent-entry.js:134` |\n| `readReleasePropagationJson` | function: function readReleasePropagationJson(value, { cwd = process.cwd(), label = \"json\" } = {}) | value, { cwd = process.cwd(), label = \"json\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readReleasePropagationJson } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation.js:305` |\n| `recordReleasePropagationStage` | function: function recordReleasePropagationStage({ work, expectedWorkRoot, receipt } = {}) | { work, expectedWorkRoot, receipt } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { recordReleasePropagationStage } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-work-transitions.js:45` |\n| `RELEASE_PROPAGATION_FAILURE_MATRIX` | constant: const RELEASE_PROPAGATION_FAILURE_MATRIX | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_FAILURE_MATRIX } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-agent-entry.js:66` |\n| `RELEASE_PROPAGATION_FAILURE_MATRIX_CONTRACT` | constant: const RELEASE_PROPAGATION_FAILURE_MATRIX_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_FAILURE_MATRIX_CONTRACT } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-agent-entry.js:11` |\n| `RELEASE_PROPAGATION_GRAPH_CONTRACT` | constant: const RELEASE_PROPAGATION_GRAPH_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_GRAPH_CONTRACT } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation.js:15` |\n| `RELEASE_PROPAGATION_LOCK_CONTRACT` | constant: const RELEASE_PROPAGATION_LOCK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_LOCK_CONTRACT } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation.js:17` |\n| `RELEASE_PROPAGATION_PLAN_CONTRACT` | value: RELEASE_PROPAGATION_PLAN_CONTRACT | none | unknown | No narrower error contract was mechanically discoverable. | unknown | `import { RELEASE_PROPAGATION_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation.js:1` |\n| `RELEASE_PROPAGATION_PUSH_PLAN_CONTRACT` | constant: const RELEASE_PROPAGATION_PUSH_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_PUSH_PLAN_CONTRACT } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-push.js:14` |\n| `RELEASE_PROPAGATION_PUSH_RESULT_CONTRACT` | constant: const RELEASE_PROPAGATION_PUSH_RESULT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_PUSH_RESULT_CONTRACT } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-push.js:16` |\n| `RELEASE_PROPAGATION_RECEIPT_CONTRACT` | constant: const RELEASE_PROPAGATION_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation.js:18` |\n| `RELEASE_PROPAGATION_STAGE_RECEIPT_CONTRACT` | constant: const RELEASE_PROPAGATION_STAGE_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_STAGE_RECEIPT_CONTRACT } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-work-constants.js:2` |\n| `RELEASE_PROPAGATION_WORK_CONTRACT` | constant: const RELEASE_PROPAGATION_WORK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_WORK_CONTRACT } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-work-constants.js:1` |\n| `RELEASE_PROPAGATION_WORK_STAGES` | constant: const RELEASE_PROPAGATION_WORK_STAGES | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_WORK_STAGES } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-work-constants.js:4` |\n| `repairReleasePropagationWork` | function: function repairReleasePropagationWork({ work, expectedWorkRoot, receipt } = {}) | { work, expectedWorkRoot, receipt } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { repairReleasePropagationWork } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-work-transitions.js:88` |\n| `resolveNpmRegistryRelease` | function: function resolveNpmRegistryRelease({ source: sourceInput, channel, packageMetadata, attestations, }) | { source: sourceInput, channel, packageMetadata, attestations, } | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveNpmRegistryRelease } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-pickup.js:167` |\n| `resolvePropagationChannel` | function: function resolvePropagationChannel(edge, upstreamChannel) | edge, upstreamChannel | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolvePropagationChannel } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation.js:190` |\n| `resumeReleasePropagationWork` | function: function resumeReleasePropagationWork(work) | work | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resumeReleasePropagationWork } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-work.js:518` |\n| `SITE_UPSTREAM_AGENT_ENTRY_CONTRACT` | constant: const SITE_UPSTREAM_AGENT_ENTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { SITE_UPSTREAM_AGENT_ENTRY_CONTRACT } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-agent-entry.js:9` |\n| `verifyReleasePropagationWork` | function: function verifyReleasePropagationWork(input) | input | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyReleasePropagationWork } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation-work.js:486` |\n| `writeReleasePropagationLock` | function: function writeReleasePropagationLock({ plan, target = \"\", cwd = process.cwd(), output = \"\" } = {}) | { plan, target = \"\", cwd = process.cwd(), output = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { writeReleasePropagationLock } from \"@kungfu-tech/buildchain/release-propagation\";` | `packages/core/release-propagation.js:317` |\n\n## `@kungfu-tech/buildchain/release-activation-transaction`\n\nTarget: `./packages/core/release-activation-transaction.js`. Public symbols: 11.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `abortReleaseActivationTransaction` | function: function abortReleaseActivationTransaction(transaction, reason) | transaction, reason | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { abortReleaseActivationTransaction } from \"@kungfu-tech/buildchain/release-activation-transaction\";` | `packages/core/release-activation-transaction.js:277` |\n| `createReleaseActivationReceiptSet` | function: function createReleaseActivationReceiptSet({ transaction, receipts = [], } = {}) | { transaction, receipts = [], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleaseActivationReceiptSet } from \"@kungfu-tech/buildchain/release-activation-transaction\";` | `packages/core/release-activation-transaction.js:311` |\n| `createReleaseActivationTransaction` | function: function createReleaseActivationTransaction({ transactionId, mode = \"shadow\", bindings, owners, } = {}) | { transactionId, mode = \"shadow\", bindings, owners, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleaseActivationTransaction } from \"@kungfu-tech/buildchain/release-activation-transaction\";` | `packages/core/release-activation-transaction.js:103` |\n| `recordReleaseActivationPhase` | function: function recordReleaseActivationPhase(transaction, phaseId, { receiptRoots = [], failure = \"\" } = {}) | transaction, phaseId, { receiptRoots = [], failure = \"\" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { recordReleaseActivationPhase } from \"@kungfu-tech/buildchain/release-activation-transaction\";` | `packages/core/release-activation-transaction.js:217` |\n| `RELEASE_ACTIVATION_CONTRACT` | constant: const RELEASE_ACTIVATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_ACTIVATION_CONTRACT } from \"@kungfu-tech/buildchain/release-activation-transaction\";` | `packages/core/release-activation-transaction.js:3` |\n| `RELEASE_ACTIVATION_PHASES` | constant: const RELEASE_ACTIVATION_PHASES | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_ACTIVATION_PHASES } from \"@kungfu-tech/buildchain/release-activation-transaction\";` | `packages/core/release-activation-transaction.js:8` |\n| `RELEASE_ACTIVATION_RECEIPT_SET_CONTRACT` | constant: const RELEASE_ACTIVATION_RECEIPT_SET_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_ACTIVATION_RECEIPT_SET_CONTRACT } from \"@kungfu-tech/buildchain/release-activation-transaction\";` | `packages/core/release-activation-transaction.js:5` |\n| `releaseActivationRoot` | function: function releaseActivationRoot(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { releaseActivationRoot } from \"@kungfu-tech/buildchain/release-activation-transaction\";` | `packages/core/release-activation-transaction.js:38` |\n| `rollbackReleaseActivationTransaction` | function: function rollbackReleaseActivationTransaction(transaction, { toSiteSourceSha, reason } = {}) | transaction, { toSiteSourceSha, reason } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { rollbackReleaseActivationTransaction } from \"@kungfu-tech/buildchain/release-activation-transaction\";` | `packages/core/release-activation-transaction.js:290` |\n| `validateReleaseActivationReceiptSet` | function: function validateReleaseActivationReceiptSet(receiptSet, { allowShadow = true } = {}) | receiptSet, { allowShadow = true } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateReleaseActivationReceiptSet } from \"@kungfu-tech/buildchain/release-activation-transaction\";` | `packages/core/release-activation-transaction.js:376` |\n| `validateReleaseActivationTransaction` | function: function validateReleaseActivationTransaction(transaction) | transaction | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateReleaseActivationTransaction } from \"@kungfu-tech/buildchain/release-activation-transaction\";` | `packages/core/release-activation-transaction.js:146` |\n\n## `@kungfu-tech/buildchain/surface-manifest`\n\nTarget: `./packages/core/surface-manifest.js`. Public symbols: 3.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `applySurfaceTimestampPolicy` | function: function applySurfaceTimestampPolicy(manifest, options = {}) | manifest, options = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { applySurfaceTimestampPolicy } from \"@kungfu-tech/buildchain/surface-manifest\";` | `packages/core/surface-manifest.js:79` |\n| `createSurfaceTimestampPolicy` | function: function createSurfaceTimestampPolicy({ generatedAt = \"\", publishedAt = \"\", sourceDateEpoch = process.env.SOURCE_DATE_EPOCH \\|\\| DEFAULT_SOURCE_DATE_EPOCH, sourceRevision = \"\", deterministicInputs = [], timestampPolicy = \"\", timestampFields = [\"generatedAt\", \"publishedAt\"], timestampFieldsParticipateInArtifactDigest = true, artifactDigestScope = \"manifest-and-artifact\", reproducible = true, } = {}) | { generatedAt = \"\", publishedAt = \"\", sourceDateEpoch = process.env.SOURCE_DATE_EPOCH \\|\\| DEFAULT_SOURCE_DATE_EPOCH, sourceRevision = \"\", deterministicInputs = [], timestampPolicy = \"\", timestampFields = [\"generatedAt\", \"publishedAt\"], timestampFieldsParticipateInArtifactDigest = true, artifactDigestScope = \"manifest-and-artifact\", reproducible = true, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createSurfaceTimestampPolicy } from \"@kungfu-tech/buildchain/surface-manifest\";` | `packages/core/surface-manifest.js:34` |\n| `SURFACE_TIMESTAMP_POLICY_CONTRACT` | constant: const SURFACE_TIMESTAMP_POLICY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { SURFACE_TIMESTAMP_POLICY_CONTRACT } from \"@kungfu-tech/buildchain/surface-manifest\";` | `packages/core/surface-manifest.js:1` |\n\n## `@kungfu-tech/buildchain/buildchain-kfd-claims`\n\nTarget: `./packages/core/buildchain-kfd-claims.js`. Public symbols: 10.\n\n| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |\n| --- | --- | --- | --- | --- | --- | --- | --- |\n| `BUILDCHAIN_AGENT_MANUALS` | constant: const BUILDCHAIN_AGENT_MANUALS | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_AGENT_MANUALS } from \"@kungfu-tech/buildchain/buildchain-kfd-claims\";` | `packages/core/buildchain-agent-manuals.js:1` |\n| `BUILDCHAIN_KFD_CLAIM_REGISTRY_CONTRACT` | constant: const BUILDCHAIN_KFD_CLAIM_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD_CLAIM_REGISTRY_CONTRACT } from \"@kungfu-tech/buildchain/buildchain-kfd-claims\";` | `packages/core/buildchain-kfd-claims.js:14` |\n| `BUILDCHAIN_KFD_COLLABORATION_INTERFACE_CONTRACT` | constant: const BUILDCHAIN_KFD_COLLABORATION_INTERFACE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD_COLLABORATION_INTERFACE_CONTRACT } from \"@kungfu-tech/buildchain/buildchain-kfd-claims\";` | `packages/core/buildchain-kfd-claims.js:15` |\n| `createBuildchainKfd1Witness` | function: function createBuildchainKfd1Witness({ root = process.cwd(), sourceSha = \"\" } = {}) | { root = process.cwd(), sourceSha = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfd1Witness } from \"@kungfu-tech/buildchain/buildchain-kfd-claims\";` | `packages/core/buildchain-kfd-claims.js:530` |\n| `createBuildchainKfd2Claims` | function: function createBuildchainKfd2Claims({ root = process.cwd(), witnessFiles = {} } = {}) | { root = process.cwd(), witnessFiles = {} } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfd2Claims } from \"@kungfu-tech/buildchain/buildchain-kfd-claims\";` | `packages/core/buildchain-kfd-claims.js:687` |\n| `createBuildchainKfd3ArtifactWitness` | function: function createBuildchainKfd3ArtifactWitness({ root = process.cwd(), sourceSha = \"\" } = {}) | { root = process.cwd(), sourceSha = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfd3ArtifactWitness } from \"@kungfu-tech/buildchain/buildchain-kfd-claims\";` | `packages/core/buildchain-kfd-claims.js:647` |\n| `createBuildchainKfd3PrebuildWitness` | function: function createBuildchainKfd3PrebuildWitness({ root = process.cwd(), sourceSha = \"\" } = {}) | { root = process.cwd(), sourceSha = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfd3PrebuildWitness } from \"@kungfu-tech/buildchain/buildchain-kfd-claims\";` | `packages/core/buildchain-kfd-claims.js:583` |\n| `createBuildchainKfdClaimRegistry` | function: function createBuildchainKfdClaimRegistry({ root = process.cwd(), sourceSha = \"\" } = {}) | { root = process.cwd(), sourceSha = \"\" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfdClaimRegistry } from \"@kungfu-tech/buildchain/buildchain-kfd-claims\";` | `packages/core/buildchain-kfd-claims.js:510` |\n| `createBuildchainKfdSurfaceRegistry` | function: function createBuildchainKfdSurfaceRegistry({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfdSurfaceRegistry } from \"@kungfu-tech/buildchain/buildchain-kfd-claims\";` | `packages/core/buildchain-kfd-claims.js:411` |\n| `createBuildchainPublicClaimDefinitions` | function: function createBuildchainPublicClaimDefinitions() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainPublicClaimDefinitions } from \"@kungfu-tech/buildchain/buildchain-kfd-claims\";` | `packages/core/buildchain-kfd-claims.js:226` |"
     },
     {
       "id": "manual:observed-evidence-patrol",
@@ -3316,7 +3357,7 @@
       ],
       "maturity": "preview",
       "sourcePath": "docs/release-propagation.md",
-      "digest": "sha256:3b7a2a0437f8a3a4e5cff7e05a2a8c427be597d85e93d49d5e35ba2a2b089afc",
+      "digest": "sha256:6e8417ff70db290ee6197f064ed9b7a7da3770738509fac06161dad05b3fca7f",
       "headings": [
         {
           "level": 1,
@@ -3338,6 +3379,11 @@
           "title": "CLI",
           "anchor": "cli"
         },
+        {
+          "level": 2,
+          "title": "Unified Site agent entry",
+          "anchor": "unified-site-agent-entry"
+        },
         {
           "level": 2,
           "title": "Agent-native work envelope",
@@ -3354,7 +3400,7 @@
           "anchor": "kfd-to-site-libkungfu-dev"
         }
       ],
-      "markdown": "# Release Propagation\n\nRelease propagation lets a finalized upstream release open a downstream update\nPR using the upstream release passport as the audit source. It is for product\nchains such as:\n\n```text\nkfd -> site-libkungfu-dev\nA -> B -> C\n```\n\nThe downstream repository receives an exact lock, not a floating dist-tag. A\nsite or app can then consume the upstream package, site bundle, or release\npassport as its single source of truth without hand-copying release facts.\n\n## Contract\n\nThe propagation graph is declarative JSON:\n\n```json\n{\n  \"schemaVersion\": 1,\n  \"contract\": \"kungfu-buildchain-release-propagation-graph\",\n  \"nodes\": [\n    {\n      \"id\": \"kfd\",\n      \"repository\": \"kungfu-systems/kfd\",\n      \"package\": \"@kungfu-tech/kfd\"\n    },\n    {\n      \"id\": \"site-libkungfu-dev\",\n      \"repository\": \"kungfu-systems/site-libkungfu-dev\",\n      \"lockPath\": \"buildchain.upstreams/kfd.release.json\",\n      \"baseRef\": \"dev/v2/v2.7\"\n    }\n  ],\n  \"edges\": [\n    {\n      \"id\": \"kfd-to-site\",\n      \"from\": \"kfd\",\n      \"to\": \"site-libkungfu-dev\",\n      \"channelPolicy\": \"preserve\"\n    }\n  ]\n}\n```\n\n`channelPolicy: \"preserve\"` is the default and maps:\n\n```text\nalpha   -> alpha\nrelease -> release\n```\n\nCross-channel mapping is allowed only when an edge declares\n`channelPolicy: \"explicit\"` and a `channelMap`. Buildchain rejects cycles so a\nchain can fan out or continue as `A -> B -> C`, but cannot loop back into an\nalready visited release line.\n\n## Upstream Release Envelope\n\nThe upstream release envelope is the post-finalization fact set:\n\n```json\n{\n  \"repository\": \"kungfu-systems/kfd\",\n  \"channel\": \"alpha\",\n  \"tag\": \"v1.4.0-alpha.3\",\n  \"sourceSha\": \"1111111111111111111111111111111111111111\",\n  \"tagTargetSha\": \"1111111111111111111111111111111111111111\",\n  \"package\": {\n    \"name\": \"@kungfu-tech/kfd\",\n    \"version\": \"1.4.0-alpha.3\",\n    \"integrity\": \"sha512-...\",\n    \"gitHead\": \"1111111111111111111111111111111111111111\"\n  },\n  \"releasePassport\": {\n    \"url\": \"https://github.com/kungfu-systems/kfd/releases/download/v1.4.0-alpha.3/buildchain.release.json\",\n    \"sha256\": \"2222222222222222222222222222222222222222222222222222222222222222\"\n  },\n  \"siteBundle\": {\n    \"manifestSha256\": \"3333333333333333333333333333333333333333333333333333333333333333\"\n  }\n}\n```\n\nThe package version, integrity, and npm `gitHead` must be exact. The exact tag\nmust be `v<version>`, and `gitHead`, tag target, and `sourceSha` must describe\nthe same source commit before propagation is admitted. Downstream build logic\ninstalls that version directly and never resolves `alpha` or `latest` again.\n\nPublication repositories can propagate immutable publication archive evidence\nwithout npm package facts. The upstream envelope then includes\n`publicationArtifact`:\n\n```json\n{\n  \"repository\": \"kungfu-systems/paper-observer-declared-timelines\",\n  \"channel\": \"alpha\",\n  \"tag\": \"v0.1.0-alpha.1\",\n  \"sourceSha\": \"4444444444444444444444444444444444444444\",\n  \"tagTargetSha\": \"4444444444444444444444444444444444444444\",\n  \"releasePassport\": {\n    \"url\": \"https://github.com/kungfu-systems/paper-observer-declared-timelines/releases/download/v0.1.0-alpha.1/buildchain.release.json\",\n    \"sha256\": \"5555555555555555555555555555555555555555555555555555555555555555\"\n  },\n  \"publicationArtifact\": {\n    \"id\": \"observer-declared-timelines\",\n    \"kind\": \"paper\",\n    \"version\": \"0.1.0-alpha.1\",\n    \"canonicalUrl\": \"https://papers.libkungfu.dev/observer-declared-timelines/\",\n    \"latestUrl\": \"https://papers.libkungfu.dev/observer-declared-timelines/latest/\",\n    \"latestEvidenceUrl\": \"https://papers.libkungfu.dev/observer-declared-timelines/latest/buildchain.release.json\",\n    \"immutableVersionUrl\": \"https://papers.libkungfu.dev/archive/observer-declared-timelines/v0.1.0-alpha.1/\",\n    \"registry\": {\n      \"url\": \"https://github.com/kungfu-systems/paper-observer-declared-timelines/releases/download/v0.1.0-alpha.1/publication-registry.json\",\n      \"sha256\": \"6666666666666666666666666666666666666666666666666666666666666666\"\n    },\n    \"manifest\": {\n      \"url\": \"https://github.com/kungfu-systems/paper-observer-declared-timelines/releases/download/v0.1.0-alpha.1/publication-artifact.json\",\n      \"sha256\": \"7777777777777777777777777777777777777777777777777777777777777777\"\n    },\n    \"passport\": {\n      \"url\": \"https://github.com/kungfu-systems/paper-observer-declared-timelines/releases/download/v0.1.0-alpha.1/publication-artifact-passport.json\",\n      \"sha256\": \"8888888888888888888888888888888888888888888888888888888888888888\"\n    },\n    \"primaryArtifact\": {\n      \"path\": \"_build/main.pdf\",\n      \"url\": \"https://papers.libkungfu.dev/archive/observer-declared-timelines/v0.1.0-alpha.1/main.pdf\",\n      \"sha256\": \"9999999999999999999999999999999999999999999999999999999999999999\"\n    }\n  }\n}\n```\n\nThis lets a site repository render the latest reader page and historical\nversion index from release facts while keeping old PDFs, source bundles,\nmanifests, and passports immutable.\n\nWhen the downstream consumer is expected to update an exact npm paper pin, the\nupstream envelope must carry both `package` and `publicationArtifact`. The\nconsumer can then prove that package name, version, sha512 integrity,\npublication URLs, and immutable artifact digests all describe the same release.\n`publicationArtifact` without `package` remains valid for evidence-only\npropagation, but it cannot qualify a package-pin fast path.\n\n## CLI\n\nGenerate a propagation plan:\n\n```bash\nbuildchain release-propagation plan \\\n  --graph buildchain.release-propagation.json \\\n  --upstream-release .buildchain/upstream-release.json \\\n  --output .buildchain/release-propagation-plan.json \\\n  --json\n```\n\nWrite the downstream lock:\n\n```bash\nbuildchain release-propagation write-lock \\\n  --plan .buildchain/release-propagation-plan.json \\\n  --target site-libkungfu-dev \\\n  --cwd downstream-checkout \\\n  --json\n```\n\nThe written lock has contract\n`kungfu-buildchain-release-propagation-lock` and records:\n\n- upstream repository, channel, exact tag, source SHA;\n- optional npm package name, exact version, and sha512 integrity;\n- optional publication artifact canonical/latest/immutable URLs, registry,\n  manifest, passport, source bundle, and primary artifact digests;\n- release passport URL and SHA-256;\n- optional site bundle manifest SHA-256;\n- downstream repository, channel, base ref, lock path;\n- edge id and channel policy;\n- a deterministic propagation key and branch derived from the exact upstream\n  repository/version/channel plus downstream repository.\n\nRepeated runs for the same release identity reuse that branch and lock. A\ndifferent release version or channel receives a different branch, so concurrent\nreleases cannot collapse into one mutable propagation PR.\n\nCreate the exact propagation receipt after the lock/PR outcome is known:\n\n```bash\nbuildchain release-propagation receipt \\\n  --plan .buildchain/release-propagation-plan.json \\\n  --lock-result .buildchain/release-propagation-write-lock.json \\\n  --pr-outcome .buildchain/release-propagation-pr-outcome.json \\\n  --target site-libkungfu-dev \\\n  --output .buildchain/release-propagation-receipt.json \\\n  --json\n```\n\nThe receipt keeps four machine states separate:\n\n- `package-published`: exact npm name/version/integrity exists;\n- `alpha-complete`: the upstream alpha passport/tag is complete;\n- `staging-visible`: the downstream staging surface is actually visible;\n- `production-visible`: the production surface is actually visible.\n\nPackage publication or alpha completion never implies either visibility state.\n\n## Agent-native work envelope\n\nSetting `agent-work-mode: capture-only` makes a finalized release emit a\nresumable delivery handoff without mutating the downstream repository. Passing\nan exact `agent-work-context-json` instead emits an already-authorized unit.\nBuildchain emits one\n`kungfu-buildchain-release-propagation-work` v1 envelope per exact release and\ndownstream target. This is a Buildchain domain execution contract, not another\nWork Control database or authority.\n\nThe envelope binds:\n\n- the exact normalized upstream release and release-lock roots;\n- the downstream repository, channel, base ref, expected base SHA, managed\n  branch, lock path, and propagation key;\n- exact parent and child `kungfu.assignment-graph.work-ref/v1` values derived\n  from the immutable release and downstream plan;\n- either a pending Family binding or one exact\n  `kungfu.work-control.initiative-family-state/v2` coordinate;\n- capture-only or end-to-end execution authority, including an active typed\n  execution-Warrant reference for execution;\n- explicit publish-to-production intent, deterministic commands, canonical\n  ordered stages, a recovery cursor, stage receipts, supersession policy, and\n  a content root.\n\nThe ordered stages are:\n\n```text\nmaterialize -> verify-release -> push-branch -> pull-request -> preview\n-> independent-review -> protected-merge -> staging -> production-release\n-> production-deploy -> online-readback -> complete\n```\n\n`pull-request` and `protected-merge` are intermediate states. Only exact online\nreadback followed by an accepted Work Control Decision can record `complete`.\nEvery state transition uses expected-old fencing against the current work\ncontent root. An identical initial envelope has the same work id and root;\nnewer releases receive distinct propagation keys and must name an explicit\nsuperseded work root when they replace unfinished work.\n\nThe context has this shape (roots abbreviated here only for readability):\n\n```json\n{\n  \"parentWorkRef\": {\n    \"schema\": \"kungfu.assignment-graph.work-ref/v1\",\n    \"workspace_identity_root\": \"sha256:<64 hex>\",\n    \"object_kind\": \"initiative\",\n    \"subject\": \"paper-publication\",\n    \"version_root\": \"sha256:<64 hex>\",\n    \"cut_root\": \"sha256:<64 hex>\"\n  },\n  \"childWorkRef\": {\n    \"schema\": \"kungfu.assignment-graph.work-ref/v1\",\n    \"workspace_identity_root\": \"sha256:<64 hex>\",\n    \"object_kind\": \"assignment\",\n    \"subject\": \"site-propagation\",\n    \"version_root\": \"sha256:<64 hex>\",\n    \"cut_root\": \"sha256:<64 hex>\"\n  },\n  \"familyState\": {\n    \"schema\": \"kungfu.work-control.initiative-family-state/v2\",\n    \"stateRoot\": \"sha256:<64 hex>\",\n    \"v1ProjectionRoot\": \"sha256:<64 hex>\",\n    \"typedBindingRoot\": \"sha256:<64 hex>\",\n    \"factWorld\": \"<owning fact world>\",\n    \"cutRoot\": \"sha256:<64 hex>\"\n  },\n  \"authority\": {\n    \"mode\": \"capture-only\",\n    \"publishToProduction\": false,\n    \"allowedActions\": [],\n    \"executionPrincipal\": null,\n    \"sourceControlPrincipal\": null,\n    \"executionWarrant\": null\n  },\n  \"supersedesWorkRoot\": \"\"\n}\n```\n\nAutomatic capture emits deterministic Buildchain-owned release and propagation\nWorkRefs, leaves `workControl.bindingState` as `pending`, emits no Family State\nor Warrant, and performs no downstream write. Claiming that unit supplies the\nexact Family State v2 coordinate and active Warrant while preserving the work\nidentity. An executing input must carry an active Warrant at the same Family\nState fact world and cut, explicit production intent, and the complete supported\naction set. It also binds the acting Agent principal and the source-control\nprincipal that authors the PR. Buildchain never invents external Work Control\nauthority.\n\nA managed Paper opts into automatic capture with a thin, source-controlled\n`.buildchain/release-propagation.json`. The sealed release workflow reads that\nexact file from the released Paper SHA only after npm, tag, Passport, and\npublication evidence agree. It emits one paused work artifact per declared\ntarget; publication itself does not open a Site PR.\n\n```json\n{\n  \"schemaVersion\": 1,\n  \"contract\": \"kungfu-buildchain-paper-release-propagation\",\n  \"sourceNode\": \"paper-example\",\n  \"graph\": {\n    \"schemaVersion\": 1,\n    \"contract\": \"kungfu-buildchain-release-propagation-graph\",\n    \"nodes\": [],\n    \"edges\": []\n  },\n  \"targets\": [\"site-libkungfu-dev\"]\n}\n```\n\nA managed npm package uses the parallel generic contract and passes its path to\nthe release-candidate promotion workflow:\n\n```json\n{\n  \"schemaVersion\": 1,\n  \"contract\": \"kungfu-buildchain-package-release-propagation\",\n  \"sourceNode\": \"kfd\",\n  \"graph\": {\n    \"schemaVersion\": 1,\n    \"contract\": \"kungfu-buildchain-release-propagation-graph\",\n    \"nodes\": [],\n    \"edges\": []\n  },\n  \"targets\": [\"site-libkungfu-dev\"]\n}\n```\n\n```yaml\nwith:\n  release-propagation-config-path: .buildchain/release-propagation.json\n```\n\nThe config is read with `git show` from the exact finalized release SHA. Its\nroot fields, graph fields, nodes, edges, targets, and execution profiles reject\nunknown fields. After npm publication and the public GitHub Release are\ncomplete, Buildchain independently reads npm `version`, `dist.integrity`, and\n`gitHead`, resolves annotated Git tags to their commit, downloads the public\n`buildchain.release.json` asset, and compares its bytes with the finalized\nPassport. Only an exact source SHA, tag target, npm `gitHead`, package version,\nintegrity, and Passport digest can produce the capture artifact. The promotion\noutput `release-propagation-work-artifact` names the restart-safe artifact set.\nNo downstream checkout, branch, or pull request is created by this step.\n\nEach graph target owns an exact GitHub web-surface execution profile: workflow,\nbase and managed branch, lock path, consumer commands, production status URL,\nand production artifact readback URLs. The sealed workflow rejects extra config\nfields, unknown targets, or a target whose base revision cannot be resolved.\n\nThe reusable workflow keeps its prior behavior when `agent-work-mode` is\n`legacy` (the default). Managed Paper callers set `capture-only`; an Agent later\nclaims the emitted artifact and resumes from its machine-readable `next_action`.\n\nAgent entrypoints are machine-readable and restart-safe:\n\n```bash\nbuildchain release-propagation work create ... --output work.json --json\nbuildchain release-propagation work status --work work.json --json\nbuildchain release-propagation work resume --work work.json --json\nbuildchain release-propagation work claim ... --output successor.json --json\nbuildchain release-propagation work receipt ... --output receipt.json --json\nbuildchain release-propagation work record ... --output successor.json --json\nbuildchain release-propagation work repair ... --output successor.json --json\nbuildchain release-propagation work complete ... --output successor.json --json\n```\n\nKnown operational races (`stale-branch`, `expected-old-mismatch`,\n`lockfile-drift`, `failed-check`, `interrupted-execution`, and `ci-delay`) return\na retryable repair action. Semantic ambiguity, missing credentials, policy\nexpansion, and unknown failures stop at `needs-decision`. Release-contract\nmismatch, immutable-artifact conflict, and destructive recovery stop at a hard\nsafety gate. Evidence locators containing signed or credential parameters are\nrejected.\n\nSuccessful stage receipts are typed, not generic progress notes. In particular,\nthe pushed-branch receipt hashes the full expected-old branch reconciliation;\nreview binds an approved GitHub review and must come from an identity distinct\nfrom both the acting Agent and PR author; production deployment carries release,\nlock, deployed artifact, expected readback digest, and rollback coordinates; and\nonline readback must cover the exact execution-profile URLs with HTTP 200,\nobserved non-zero bytes, exact deployed Git revision, and matching release and\nartifact digests. The final receipt binds the accepted Work Control Decision\nroot.\n\n## Reusable Workflow\n\nUpstream repositories can call\n`.github/workflows/release-propagation.yml@v3` after release finalization:\n\n```yaml\njobs:\n  propagate-site:\n    uses: kungfu-systems/buildchain/.github/workflows/release-propagation.yml@v3\n    with:\n      buildchain-ref: v3\n      graph-json: ${{ needs.release.outputs.propagation-graph-json }}\n      upstream-release-json: ${{ needs.release.outputs.upstream-release-json }}\n      downstream-target: site-libkungfu-dev\n      downstream-repository: kungfu-systems/site-libkungfu-dev\n      downstream-base-ref: dev/v2/v2.7\n      downstream-update-command: >-\n        node scripts/paper-propagation.cjs consume\n        --lock \"$BUILDCHAIN_PROPAGATION_LOCK_PATH\"\n        && corepack pnpm install --lockfile-only --ignore-scripts\n      downstream-prepare-command: pnpm install --frozen-lockfile --ignore-scripts\n      downstream-verify-command: pnpm run check\n      dry-run: false\n    secrets:\n      propagation-token: ${{ secrets.BUILDCHAIN_PROMOTION_TOKEN }}\n```\n\nThe downstream branch name may be reused across upstream releases. Before\nreplacing an existing managed branch, the workflow reads its exact remote SHA\nand pushes with an explicit `--force-with-lease=<ref>:<sha>`. A surviving branch\nfrom a merged PR is therefore reconciled without manual deletion, while a\nconcurrent writer makes the lease fail closed. The controller receipt includes a\n`propagation-branch-reconciliation` evidence file recording the branch, observed\nremote SHA, pushed SHA, lease mode, and the deterministically created or updated\nopen PR.\n\nThe workflow checks out the Buildchain runtime selected by\n`buildchain-repository` and `buildchain-ref` into `.buildchain/runtime`, invokes\nthat runtime for the propagation plan and lock write, then checks out the\ndownstream repository and writes the exact lock. If\n`downstream-update-command` is set, Buildchain runs that consumer-owned command\nafter writing the lock and exposes the exact lock path, lock SHA-256,\npropagation key, branch, and upstream release JSON as\n`BUILDCHAIN_PROPAGATION_*` environment variables. The command is part of the\ndownstream PR diff; it is not a deployment hook.\n\nA consumer that must perform further deterministic preparation can declare\n`downstream-prepare-command`. The command receives\n`BUILDCHAIN_UPSTREAM_PACKAGE_NAME`, `BUILDCHAIN_UPSTREAM_PACKAGE_VERSION`, and\n`BUILDCHAIN_UPSTREAM_RELEASE_LOCK`. After preparation, Buildchain refreshes an\nexisting `<!-- buildchain:badges:start -->` README block by default. Consumers\ncan disable that step with `refresh-managed-readme-badges: false`.\n\n`downstream-verify-command` runs against the final tree before any commit or\npush, so consumers can use the same check as their PR workflow. Update,\npreparation, badge refresh, and verification failures all fail closed. The\nworkflow stages the complete deterministic result, signs the propagation\ncommit with DCO, and then opens or updates the PR. With no agent work context,\nthe reusable workflow retains this backward-compatible PR boundary. With an\nexecuting work context, it records materialization, verification, branch, and\nPR receipts and returns `preview` as the next action; the authorized Agent then\ncontinues through the downstream repository's normal protected review,\npublication, deployment, and readback entrypoints. A byte-identical rerun is an\nexplicit successful no-op, never a synthetic completion.\n\nFor unreleased runtime validation, keep the caller's reusable workflow reference\non `@v3` and pass a temporary train ref through `buildchain-ref`.\n\n## kfd to site-libkungfu-dev\n\nFor `kfd -> site-libkungfu-dev`, the graph should preserve channels:\n\n- a `kfd` alpha release produces a downstream alpha lock and downstream alpha\n  publication consumes the exact `@kungfu-tech/kfd@...-alpha.N` package;\n- a `kfd` stable release produces a downstream release lock and downstream\n  stable publication consumes the exact stable package.\n\nThis keeps the site synchronized to the package truth without allowing the site\nto drift onto a floating npm dist-tag."
+      "markdown": "---\nstatus: active\nperiod: ongoing\ntheme: buildchain-release-propagation\ndoc_type: technical-reference\nsource_level: local-files\nconfidence: high\nsensitivity: public\nevidence_grade: A\nreview_state: unreviewed\nlast_reviewed: 2026-08-03\nai_provenance:\n  model_family: GPT-5\n  product: Codex\n  generated_at: 2026-08-03\n  invisible_context: not asserted\n---\n\n# Release Propagation\n\nRelease propagation lets a finalized upstream release open a downstream update\nPR using the upstream release passport as the audit source. It is for product\nchains such as:\n\n```text\nkfd -> site-libkungfu-dev\nA -> B -> C\n```\n\nThe downstream repository receives an exact lock, not a floating dist-tag. A\nsite or app can then consume the upstream package, site bundle, or release\npassport as its single source of truth without hand-copying release facts.\n\n## Contract\n\nThe propagation graph is declarative JSON:\n\n```json\n{\n  \"schemaVersion\": 1,\n  \"contract\": \"kungfu-buildchain-release-propagation-graph\",\n  \"nodes\": [\n    {\n      \"id\": \"kfd\",\n      \"repository\": \"kungfu-systems/kfd\",\n      \"package\": \"@kungfu-tech/kfd\"\n    },\n    {\n      \"id\": \"site-libkungfu-dev\",\n      \"repository\": \"kungfu-systems/site-libkungfu-dev\",\n      \"lockPath\": \"buildchain.upstreams/kfd.release.json\",\n      \"baseRef\": \"dev/v2/v2.7\"\n    }\n  ],\n  \"edges\": [\n    {\n      \"id\": \"kfd-to-site\",\n      \"from\": \"kfd\",\n      \"to\": \"site-libkungfu-dev\",\n      \"channelPolicy\": \"preserve\"\n    }\n  ]\n}\n```\n\n`channelPolicy: \"preserve\"` is the default and maps:\n\n```text\nalpha   -> alpha\nrelease -> release\n```\n\nCross-channel mapping is allowed only when an edge declares\n`channelPolicy: \"explicit\"` and a `channelMap`. Buildchain rejects cycles so a\nchain can fan out or continue as `A -> B -> C`, but cannot loop back into an\nalready visited release line.\n\n## Upstream Release Envelope\n\nThe upstream release envelope is the post-finalization fact set:\n\n```json\n{\n  \"repository\": \"kungfu-systems/kfd\",\n  \"channel\": \"alpha\",\n  \"tag\": \"v1.4.0-alpha.3\",\n  \"sourceSha\": \"1111111111111111111111111111111111111111\",\n  \"tagTargetSha\": \"1111111111111111111111111111111111111111\",\n  \"package\": {\n    \"name\": \"@kungfu-tech/kfd\",\n    \"version\": \"1.4.0-alpha.3\",\n    \"integrity\": \"sha512-...\",\n    \"gitHead\": \"1111111111111111111111111111111111111111\"\n  },\n  \"releasePassport\": {\n    \"url\": \"https://github.com/kungfu-systems/kfd/releases/download/v1.4.0-alpha.3/buildchain.release.json\",\n    \"sha256\": \"2222222222222222222222222222222222222222222222222222222222222222\"\n  },\n  \"siteBundle\": {\n    \"manifestSha256\": \"3333333333333333333333333333333333333333333333333333333333333333\"\n  }\n}\n```\n\nThe package version, integrity, and npm `gitHead` must be exact. The exact tag\nmust be `v<version>`, and `gitHead`, tag target, and `sourceSha` must describe\nthe same source commit before propagation is admitted. Downstream build logic\ninstalls that version directly and never resolves `alpha` or `latest` again.\n\nPublication repositories can propagate immutable publication archive evidence\nwithout npm package facts. The upstream envelope then includes\n`publicationArtifact`:\n\n```json\n{\n  \"repository\": \"kungfu-systems/paper-observer-declared-timelines\",\n  \"channel\": \"alpha\",\n  \"tag\": \"v0.1.0-alpha.1\",\n  \"sourceSha\": \"4444444444444444444444444444444444444444\",\n  \"tagTargetSha\": \"4444444444444444444444444444444444444444\",\n  \"releasePassport\": {\n    \"url\": \"https://github.com/kungfu-systems/paper-observer-declared-timelines/releases/download/v0.1.0-alpha.1/buildchain.release.json\",\n    \"sha256\": \"5555555555555555555555555555555555555555555555555555555555555555\"\n  },\n  \"publicationArtifact\": {\n    \"id\": \"observer-declared-timelines\",\n    \"kind\": \"paper\",\n    \"version\": \"0.1.0-alpha.1\",\n    \"canonicalUrl\": \"https://papers.libkungfu.dev/observer-declared-timelines/\",\n    \"latestUrl\": \"https://papers.libkungfu.dev/observer-declared-timelines/latest/\",\n    \"latestEvidenceUrl\": \"https://papers.libkungfu.dev/observer-declared-timelines/latest/buildchain.release.json\",\n    \"immutableVersionUrl\": \"https://papers.libkungfu.dev/archive/observer-declared-timelines/v0.1.0-alpha.1/\",\n    \"registry\": {\n      \"url\": \"https://github.com/kungfu-systems/paper-observer-declared-timelines/releases/download/v0.1.0-alpha.1/publication-registry.json\",\n      \"sha256\": \"6666666666666666666666666666666666666666666666666666666666666666\"\n    },\n    \"manifest\": {\n      \"url\": \"https://github.com/kungfu-systems/paper-observer-declared-timelines/releases/download/v0.1.0-alpha.1/publication-artifact.json\",\n      \"sha256\": \"7777777777777777777777777777777777777777777777777777777777777777\"\n    },\n    \"passport\": {\n      \"url\": \"https://github.com/kungfu-systems/paper-observer-declared-timelines/releases/download/v0.1.0-alpha.1/publication-artifact-passport.json\",\n      \"sha256\": \"8888888888888888888888888888888888888888888888888888888888888888\"\n    },\n    \"primaryArtifact\": {\n      \"path\": \"_build/main.pdf\",\n      \"url\": \"https://papers.libkungfu.dev/archive/observer-declared-timelines/v0.1.0-alpha.1/main.pdf\",\n      \"sha256\": \"9999999999999999999999999999999999999999999999999999999999999999\"\n    }\n  }\n}\n```\n\nThis lets a site repository render the latest reader page and historical\nversion index from release facts while keeping old PDFs, source bundles,\nmanifests, and passports immutable.\n\nWhen the downstream consumer is expected to update an exact npm paper pin, the\nupstream envelope must carry both `package` and `publicationArtifact`. The\nconsumer can then prove that package name, version, sha512 integrity,\npublication URLs, and immutable artifact digests all describe the same release.\n`publicationArtifact` without `package` remains valid for evidence-only\npropagation, but it cannot qualify a package-pin fast path.\n\n## CLI\n\nGenerate a propagation plan:\n\n```bash\nbuildchain release-propagation plan \\\n  --graph buildchain.release-propagation.json \\\n  --upstream-release .buildchain/upstream-release.json \\\n  --output .buildchain/release-propagation-plan.json \\\n  --json\n```\n\nWrite the downstream lock:\n\n```bash\nbuildchain release-propagation write-lock \\\n  --plan .buildchain/release-propagation-plan.json \\\n  --target site-libkungfu-dev \\\n  --cwd downstream-checkout \\\n  --json\n```\n\nThe written lock has contract\n`kungfu-buildchain-release-propagation-lock` and records:\n\n- upstream repository, channel, exact tag, source SHA;\n- optional npm package name, exact version, and sha512 integrity;\n- optional publication artifact canonical/latest/immutable URLs, registry,\n  manifest, passport, source bundle, and primary artifact digests;\n- release passport URL and SHA-256;\n- optional site bundle manifest SHA-256;\n- downstream repository, channel, base ref, lock path;\n- edge id and channel policy;\n- a deterministic propagation key and branch derived from the exact upstream\n  repository/version/channel plus downstream repository.\n\nRepeated runs for the same release identity reuse that branch and lock. A\ndifferent release version or channel receives a different branch, so concurrent\nreleases cannot collapse into one mutable propagation PR.\n\nCreate the exact propagation receipt after the lock/PR outcome is known:\n\n```bash\nbuildchain release-propagation receipt \\\n  --plan .buildchain/release-propagation-plan.json \\\n  --lock-result .buildchain/release-propagation-write-lock.json \\\n  --pr-outcome .buildchain/release-propagation-pr-outcome.json \\\n  --target site-libkungfu-dev \\\n  --output .buildchain/release-propagation-receipt.json \\\n  --json\n```\n\nThe receipt keeps four machine states separate:\n\n- `package-published`: exact npm name/version/integrity exists;\n- `alpha-complete`: the upstream alpha passport/tag is complete;\n- `staging-visible`: the downstream staging surface is actually visible;\n- `production-visible`: the production surface is actually visible.\n\nPackage publication or alpha completion never implies either visibility state.\n\n## Unified Site agent entry\n\nAn Agent begins every Site upstream update through one policy-reporting entry:\n\n```bash\nbuildchain release-propagation entry plan \\\n  --source-id <paper|kfd|buildchain|kungfu-core> \\\n  --channel <alpha|release> \\\n  --json\n```\n\nThe entry does not blur content and code release policies:\n\n| Upstream    | Trigger policy            | Entry result                                       |\n| ----------- | ------------------------- | -------------------------------------------------- |\n| Paper       | automatic release handoff | requires or resumes the exact captured Work        |\n| KFD         | automatic release handoff | requires or resumes the exact captured Work        |\n| Buildchain  | explicit Site intent      | resolves an exact published package before capture |\n| Kungfu Core | explicit Site intent      | resolves an exact published package before capture |\n\nPaper and KFD releases keep automatic capture-only handoff. Buildchain and\nKungfu Core releases remain inert until a downstream Agent receives explicit\nSite-update intent. In all four cases, the entry reports the selected policy,\nexact release coordinate when one has been admitted, Work root and recovery\ncursor when one exists, and one machine-readable next action. A GitHub PR is a\ndelivery stage inside that Work; it is not the handoff unit.\n\nFor an automatic handoff, bind the exact artifact rather than resolving a\nfloating tag again:\n\n```bash\nbuildchain release-propagation entry plan \\\n  --source-id kfd \\\n  --handoff-work work.json \\\n  --json\n```\n\nThe deterministic recovery table is available without repository mutation:\n\n```bash\nbuildchain release-propagation entry fault-matrix --json\n```\n\nIt classifies current and duplicate Work as successful no-ops, supersession as\nan explicit decision boundary, stale base/expected-old and operational failures\nas retryable, and package/schema disagreement as a hard safety gate.\n\n## Agent-native work envelope\n\nSetting `agent-work-mode: capture-only` makes a finalized release emit a\nresumable delivery handoff without mutating the downstream repository. Passing\nan exact `agent-work-context-json` instead emits an already-authorized unit.\nBuildchain emits one\n`kungfu-buildchain-release-propagation-work` v1 envelope per exact release and\ndownstream target. This is a Buildchain domain execution contract, not another\nWork Control database or authority.\n\nThe envelope binds:\n\n- the exact normalized upstream release and release-lock roots;\n- the downstream repository, channel, base ref, expected base SHA, managed\n  branch, lock path, and propagation key;\n- exact parent and child `kungfu.assignment-graph.work-ref/v1` values derived\n  from the immutable release and downstream plan;\n- either a pending Family binding or one exact\n  `kungfu.work-control.initiative-family-state/v2` coordinate;\n- capture-only or end-to-end execution authority, including an active typed\n  execution-Warrant reference for execution;\n- explicit publish-to-production intent, deterministic commands, canonical\n  ordered stages, a recovery cursor, stage receipts, supersession policy, and\n  a content root.\n\nThe ordered stages are:\n\n```text\nmaterialize -> verify-release -> push-branch -> pull-request -> preview\n-> independent-review -> protected-merge -> staging -> production-release\n-> production-deploy -> online-readback -> complete\n```\n\n`pull-request` and `protected-merge` are intermediate states. Only exact online\nreadback followed by an accepted Work Control Decision can record `complete`.\nEvery state transition uses expected-old fencing against the current work\ncontent root. An identical initial envelope has the same work id and root;\nnewer releases receive distinct propagation keys and must name an explicit\nsuperseded work root when they replace unfinished work.\n\nThe context has this shape (roots abbreviated here only for readability):\n\n```json\n{\n  \"parentWorkRef\": {\n    \"schema\": \"kungfu.assignment-graph.work-ref/v1\",\n    \"workspace_identity_root\": \"sha256:<64 hex>\",\n    \"object_kind\": \"initiative\",\n    \"subject\": \"paper-publication\",\n    \"version_root\": \"sha256:<64 hex>\",\n    \"cut_root\": \"sha256:<64 hex>\"\n  },\n  \"childWorkRef\": {\n    \"schema\": \"kungfu.assignment-graph.work-ref/v1\",\n    \"workspace_identity_root\": \"sha256:<64 hex>\",\n    \"object_kind\": \"assignment\",\n    \"subject\": \"site-propagation\",\n    \"version_root\": \"sha256:<64 hex>\",\n    \"cut_root\": \"sha256:<64 hex>\"\n  },\n  \"familyState\": {\n    \"schema\": \"kungfu.work-control.initiative-family-state/v2\",\n    \"stateRoot\": \"sha256:<64 hex>\",\n    \"v1ProjectionRoot\": \"sha256:<64 hex>\",\n    \"typedBindingRoot\": \"sha256:<64 hex>\",\n    \"factWorld\": \"<owning fact world>\",\n    \"cutRoot\": \"sha256:<64 hex>\"\n  },\n  \"authority\": {\n    \"mode\": \"capture-only\",\n    \"publishToProduction\": false,\n    \"allowedActions\": [],\n    \"executionPrincipal\": null,\n    \"sourceControlPrincipal\": null,\n    \"executionWarrant\": null\n  },\n  \"supersedesWorkRoot\": \"\"\n}\n```\n\nAutomatic capture emits deterministic Buildchain-owned release and propagation\nWorkRefs, leaves `workControl.bindingState` as `pending`, emits no Family State\nor Warrant, and performs no downstream write. Claiming that unit supplies the\nexact Family State v2 coordinate and active Warrant while preserving the work\nidentity. An executing input must carry an active Warrant at the same Family\nState fact world and cut, explicit production intent, and the complete supported\naction set. It also binds the acting Agent principal and the source-control\nprincipal that authors the PR. Buildchain never invents external Work Control\nauthority.\n\nA managed Paper opts into automatic capture with a thin, source-controlled\n`.buildchain/release-propagation.json`. The sealed release workflow reads that\nexact file from the released Paper SHA only after npm, tag, Passport, and\npublication evidence agree. It emits one paused work artifact per declared\ntarget; publication itself does not open a Site PR.\n\n```json\n{\n  \"schemaVersion\": 1,\n  \"contract\": \"kungfu-buildchain-paper-release-propagation\",\n  \"sourceNode\": \"paper-example\",\n  \"graph\": {\n    \"schemaVersion\": 1,\n    \"contract\": \"kungfu-buildchain-release-propagation-graph\",\n    \"nodes\": [],\n    \"edges\": []\n  },\n  \"targets\": [\"site-libkungfu-dev\"]\n}\n```\n\nA managed npm package uses the parallel generic contract and passes its path to\nthe release-candidate promotion workflow:\n\n```json\n{\n  \"schemaVersion\": 1,\n  \"contract\": \"kungfu-buildchain-package-release-propagation\",\n  \"sourceNode\": \"kfd\",\n  \"graph\": {\n    \"schemaVersion\": 1,\n    \"contract\": \"kungfu-buildchain-release-propagation-graph\",\n    \"nodes\": [],\n    \"edges\": []\n  },\n  \"targets\": [\"site-libkungfu-dev\"]\n}\n```\n\n```yaml\nwith:\n  release-propagation-config-path: .buildchain/release-propagation.json\n```\n\nThe config is read with `git show` from the exact finalized release SHA. Its\nroot fields, graph fields, nodes, edges, targets, and execution profiles reject\nunknown fields. After npm publication and the public GitHub Release are\ncomplete, Buildchain independently reads npm `version`, `dist.integrity`, and\n`gitHead`, resolves annotated Git tags to their commit, downloads the public\n`buildchain.release.json` asset, and compares its bytes with the finalized\nPassport. Only an exact source SHA, tag target, npm `gitHead`, package version,\nintegrity, and Passport digest can produce the capture artifact. The promotion\noutput `release-propagation-work-artifact` names the restart-safe artifact set.\nNo downstream checkout, branch, or pull request is created by this step.\n\nEach graph target owns an exact GitHub web-surface execution profile: workflow,\nbase and managed branch, lock path, consumer commands, production status URL,\nand production artifact readback URLs. The sealed workflow rejects extra config\nfields, unknown targets, or a target whose base revision cannot be resolved.\n\nThe reusable workflow keeps its prior behavior when `agent-work-mode` is\n`legacy` (the default). Managed Paper callers set `capture-only`; an Agent later\nclaims the emitted artifact and resumes from its machine-readable `next_action`.\n\nAgent entrypoints are machine-readable and restart-safe:\n\n```bash\nbuildchain release-propagation work create ... --output work.json --json\nbuildchain release-propagation work status --work work.json --json\nbuildchain release-propagation work resume --work work.json --json\nbuildchain release-propagation work claim ... --output successor.json --json\nbuildchain release-propagation work receipt ... --output receipt.json --json\nbuildchain release-propagation work record ... --output successor.json --json\nbuildchain release-propagation work repair ... --output successor.json --json\nbuildchain release-propagation work complete ... --output successor.json --json\n```\n\nThe `push-branch` stage has an executable, fail-closed entrypoint:\n\n```bash\nbuildchain release-propagation work push-plan \\\n  --work work.json \\\n  --expected-work-root sha256:<64-hex> \\\n  --cwd downstream-worktree \\\n  --remote origin \\\n  --json\n\nbuildchain release-propagation work push-branch \\\n  --work work.json \\\n  --expected-work-root sha256:<64-hex> \\\n  --cwd downstream-worktree \\\n  --remote origin \\\n  --execute \\\n  --json\n```\n\nThe executor checks the exact GitHub repository, current managed branch,\ncaptured downstream base, and expected-old Work root. It pushes only the current\ncommit with `HEAD:refs/heads/<managed-branch>`, never a bare branch or wildcard,\nnever a force option, then reads that exact remote ref back. Its typed branch\nreconciliation evidence records the argv, source SHA, destination ref, prior\nremote SHA, observed remote SHA, and whether a mutation occurred. A wrong\nrepository, unrelated branch, stale base, concurrent writer, or non-fast-forward\ntarget fails closed without mutating another branch.\n\nKnown operational races (`stale-branch`, `expected-old-mismatch`,\n`lockfile-drift`, `failed-check`, `interrupted-execution`, and `ci-delay`) return\na retryable repair action. Semantic ambiguity, missing credentials, policy\nexpansion, and unknown failures stop at `needs-decision`. Release-contract\nmismatch, immutable-artifact conflict, and destructive recovery stop at a hard\nsafety gate. Evidence locators containing signed or credential parameters are\nrejected.\n\nSuccessful stage receipts are typed, not generic progress notes. In particular,\nthe pushed-branch receipt hashes the full expected-old branch reconciliation;\nreview binds an approved GitHub review and must come from an identity distinct\nfrom both the acting Agent and PR author; production deployment carries release,\nlock, deployed artifact, expected readback digest, and rollback coordinates; and\nonline readback must cover the exact execution-profile URLs with HTTP 200,\nobserved non-zero bytes, exact deployed Git revision, and matching release and\nartifact digests. The final receipt binds the accepted Work Control Decision\nroot.\n\n## Reusable Workflow\n\nUpstream repositories can call\n`.github/workflows/release-propagation.yml@v3` after release finalization:\n\n```yaml\njobs:\n  propagate-site:\n    uses: kungfu-systems/buildchain/.github/workflows/release-propagation.yml@v3\n    with:\n      buildchain-ref: v3\n      graph-json: ${{ needs.release.outputs.propagation-graph-json }}\n      upstream-release-json: ${{ needs.release.outputs.upstream-release-json }}\n      downstream-target: site-libkungfu-dev\n      downstream-repository: kungfu-systems/site-libkungfu-dev\n      downstream-base-ref: dev/v2/v2.7\n      downstream-update-command: >-\n        node scripts/paper-propagation.cjs consume\n        --lock \"$BUILDCHAIN_PROPAGATION_LOCK_PATH\"\n        && corepack pnpm install --lockfile-only --ignore-scripts\n      downstream-prepare-command: pnpm install --frozen-lockfile --ignore-scripts\n      downstream-verify-command: pnpm run check\n      dry-run: false\n    secrets:\n      propagation-token: ${{ secrets.BUILDCHAIN_PROMOTION_TOKEN }}\n```\n\nThe downstream branch name may be reused across upstream releases. Before\nreplacing an existing managed branch, the workflow reads its exact remote SHA\nand pushes with an explicit `--force-with-lease=<ref>:<sha>`. A surviving branch\nfrom a merged PR is therefore reconciled without manual deletion, while a\nconcurrent writer makes the lease fail closed. The controller receipt includes a\n`propagation-branch-reconciliation` evidence file recording the branch, observed\nremote SHA, pushed SHA, lease mode, and the deterministically created or updated\nopen PR.\n\nThe workflow checks out the Buildchain runtime selected by\n`buildchain-repository` and `buildchain-ref` into `.buildchain/runtime`, invokes\nthat runtime for the propagation plan and lock write, then checks out the\ndownstream repository and writes the exact lock. If\n`downstream-update-command` is set, Buildchain runs that consumer-owned command\nafter writing the lock and exposes the exact lock path, lock SHA-256,\npropagation key, branch, and upstream release JSON as\n`BUILDCHAIN_PROPAGATION_*` environment variables. The command is part of the\ndownstream PR diff; it is not a deployment hook.\n\nA consumer that must perform further deterministic preparation can declare\n`downstream-prepare-command`. The command receives\n`BUILDCHAIN_UPSTREAM_PACKAGE_NAME`, `BUILDCHAIN_UPSTREAM_PACKAGE_VERSION`, and\n`BUILDCHAIN_UPSTREAM_RELEASE_LOCK`. After preparation, Buildchain refreshes an\nexisting `<!-- buildchain:badges:start -->` README block by default. Consumers\ncan disable that step with `refresh-managed-readme-badges: false`.\n\n`downstream-verify-command` runs against the final tree before any commit or\npush, so consumers can use the same check as their PR workflow. Update,\npreparation, badge refresh, and verification failures all fail closed. The\nworkflow stages the complete deterministic result, signs the propagation\ncommit with DCO, and then opens or updates the PR. With no agent work context,\nthe reusable workflow retains this backward-compatible PR boundary. With an\nexecuting work context, it records materialization, verification, branch, and\nPR receipts and returns `preview` as the next action; the authorized Agent then\ncontinues through the downstream repository's normal protected review,\npublication, deployment, and readback entrypoints. A byte-identical rerun is an\nexplicit successful no-op, never a synthetic completion.\n\nFor unreleased runtime validation, keep the caller's reusable workflow reference\non `@v3` and pass a temporary train ref through `buildchain-ref`.\n\n## kfd to site-libkungfu-dev\n\nFor `kfd -> site-libkungfu-dev`, the graph should preserve channels:\n\n- a `kfd` alpha release produces a downstream alpha lock and downstream alpha\n  publication consumes the exact `@kungfu-tech/kfd@...-alpha.N` package;\n- a `kfd` stable release produces a downstream release lock and downstream\n  stable publication consumes the exact stable package.\n\nThis keeps the site synchronized to the package truth without allowing the site\nto drift onto a floating npm dist-tag."
     },
     {
       "id": "manual:reusable-build-surface",
@@ -3368,7 +3414,7 @@
       ],
       "maturity": "stable",
       "sourcePath": "docs/reusable-build-surface.md",
-      "digest": "sha256:baadd0c0ef61d877b409d2bdf0e696e218971eb541c5f51a1a8e88e75af4904d",
+      "digest": "sha256:fe06637d604101269b013163be558c1ecc842276e27f2b5abfb6eea39e98feb0",
       "headings": [
         {
           "level": 1,
@@ -3476,7 +3522,7 @@
           "anchor": "fixture"
         }
       ],
-      "markdown": "---\nstatus: draft\nperiod: ongoing\ntheme: buildchain-reusable-build\ndoc_type: technical-reference\nsource_level: local-files\nconfidence: high\nsensitivity: public\nevidence_grade: A\nreview_state: unreviewed\nlast_reviewed: 2026-07-31\nai_provenance:\n  model_family: GPT-5\n  product: Codex\n  generated_at: 2026-07-30\n  invisible_context: not asserted\n---\n\n# Reusable Build Surface\n\nBuildchain v3 provides a reusable build workflow for repositories that need\nBuildchain's release semantics but cannot be described as a simple Node package.\nThe first target shape is `libnode`: expensive native builds, multiple operating\nsystems, self-hosted runner labels, and release artifacts that must be auditable.\n\nFor Linux release artifacts, the build workflow can hand the sealed artifact,\nplatform manifest, and Release Passport to the separate GitHub-hosted keyless\nattester. The compiler runner remains the recorded build identity; the attester\nonly signs and verifies immutable data. See\n[`github-artifact-attestation.md`](github-artifact-attestation.md).\n\n## Automatic Channel Router\n\nThe preferred consumer surface is one reusable workflow call. Consumers keep\nthis configuration for both alpha development and stable release work:\n\n```yaml\njobs:\n  build:\n    uses: kungfu-systems/buildchain/.github/workflows/build.yml@v3\n    permissions:\n      contents: read\n      issues: write\n      id-token: write\n    with:\n      working-directory: .\n      artifact-name: libnode\n      runner-preset: kungfu-v4-self-hosted\n      publish-channel: none\n    secrets: inherit\n```\n\n`buildchain-channel` defaults to `auto`. Selection uses this precedence:\n\n1. an explicit `buildchain-ref` protected authority, train, SHA, or official channel;\n2. an explicit `buildchain-channel: alpha|stable`;\n3. `publish-channel: alpha|release|major`;\n4. GitHub release prerelease metadata;\n5. a canonical semver tag;\n6. non-release PR, push, dispatch, schedule, and workflow-run events default to\n   alpha.\n\nThe resolved runtime is `vN-alpha` for development and prerelease intent and\n`vN` for stable release intent. Unknown custom publish channels, malformed\nrelease events, and non-semver release-like tags fail before the build matrix;\nthey never guess alpha for a stable release.\n\nThe router automatically selects `.buildchain/alpha-contract-lock.json` for\nalpha and `.buildchain/contract-lock.json` for stable. A repository can override\nthe common path with `buildchain-contract-lock-path`, or override one channel\nwith `buildchain-alpha-contract-lock-path` /\n`buildchain-stable-contract-lock-path`.\n\nOnly repositories changing the default policy need extra routing input:\n\n```yaml\nwith:\n  buildchain-channel: stable\n```\n\nDuring v3 prerelease evaluation windows, canaries use `build.yml@v3-alpha`.\nThe same router then selects `v3-alpha` or stable `v3` as the runtime.\nProduction consumers use `build.yml@v3`; this keeps the routing shell itself on\na stable ref.\n\nThe router is generated from `.build.yml`'s input/output surface. Run\n`node scripts/generate-channel-build-workflow.mjs` after changing the advanced\nbuild workflow; inventory and unit tests reject a stale generated router.\n\n## Advanced Workflow\n\nConsumers that need direct workflow-shell or runtime control call the advanced\nsurface:\n\n```yaml\njobs:\n  build:\n    uses: kungfu-systems/buildchain/.github/workflows/.build.yml@v3\n    with:\n      working-directory: .\n      artifact-name: libnode\n      runner-preset: kungfu-v4-self-hosted\n      linux-container-preset: kungfu-verify\n      artifact-name-template: \"{artifact}-{platform}-{sha}\"\n      artifact-paths: |\n        dist\n        build/stage\n      expected-artifacts-json: >-\n        {\"minFiles\":2,\"requiredPaths\":[\"dist/libnode.tar.gz\",\"dist/checksums.txt\"]}\n      process-summary-path: .buildchain/diagnostics/process-summary.json\n      release-candidate: true\n      publish-channel: release\n      publish-source-ref: publish-gate/release/v22/v22.22/22.22.3-kf.0\n```\n\n`runner-preset` is the stable first-class surface for known runner fleets:\n\n| Preset                  | Platforms                                                                                                      |\n| ----------------------- | -------------------------------------------------------------------------------------------------------------- |\n| `github-hosted`         | `ubuntu-24.04`, `macos-latest`, `windows-2022`                                                                 |\n| `kungfu-v4-self-hosted` | Kungfu Linux x64, macOS ARM64, and Windows x64 self-hosted runner labels                                       |\n| `kungfu-v4-native`      | Kungfu Linux x64, Linux ARM64, macOS ARM64, and Windows x64; Linux ARM64 uses GitHub-hosted `ubuntu-24.04-arm` |\n| `custom`                | Requires `platforms-json`                                                                                      |\n\nSet `self-hosted-offline-fallback: true` to inspect every exact-label\nself-hosted lane from the trusted Buildchain workflow shell before the matrix\nstarts. A lane with no matching online runner is replaced independently by its\nsupported GitHub-hosted runner: Kungfu Linux x64 uses `ubuntu-24.04`, macOS ARM64\nuses `macos-15`, and Windows x64 uses `windows-2022`. Online-but-busy runners\nremain online and keep their declared self-hosted route. Organization-owned\nrepositories inspect organization runner inventory so selected-repository runner\ngroups are not mistaken for an empty repository runner inventory. If the\ninventory token, permission, or API is unavailable, Buildchain preserves the\noriginal matrix instead of guessing that the fleet is offline. The public\nworkflow output `runner-routing-json` records only de-identified counts,\ninventory scope, and routing decisions.\n\n```yaml\nwith:\n  runner-preset: kungfu-v4-native\n  self-hosted-offline-fallback: true\nsecrets:\n  BUILDCHAIN_PROMOTION_TOKEN: ${{ secrets.KUNGFU_GITHUB_TOKEN }}\n```\n\nCallers can still provide a custom matrix with `platforms-json`. Each platform\nobject has:\n\n| Field    | Meaning                                           |\n| -------- | ------------------------------------------------- |\n| `id`     | Stable artifact/platform key, such as `linux-x64` |\n| `name`   | Human-readable job name                           |\n| `runner` | JSON string passed to `runs-on` after `fromJSON`  |\n\nThe runner field is intentionally a JSON string so callers can pass either\nGitHub-hosted runners or multi-label self-hosted runners without Buildchain\nguessing the labels.\n\nOnly include platforms that should run. GitHub schedules matrix jobs before\nsteps execute, so a disabled entry with unavailable runner labels can still\nblock the workflow queue.\n\n`fail-fast` defaults to `false`, preserving the diagnostic behavior that\ncollects every platform result. Required promotion callers can set it to `true`\nto cancel sibling native, container, and relay matrix lanes after the first\nfailure. This input changes scheduling only: it does not reduce the declared\nplatform matrix, turn cancellation into a pass, or alter artifact and release\nadmission.\n\n## Linux Job Containers\n\nLinux build platforms can run inside a digest-pinned job container while macOS\nand Windows keep using native runners. This is the recommended way to remove\nmoving Linux runner prerequisites from Buildchain consumers: the Linux host only\nneeds a GitHub Actions runner, Docker, and network access; common verification\ntools come from the image contract.\n\nUse the Kungfu verification image for lifecycle stages that need Git, jq,\nPython, uv, and fnm, but do not need native compilation:\n\n```yaml\njobs:\n  build:\n    uses: kungfu-systems/buildchain/.github/workflows/.build.yml@v3\n    with:\n      runner-preset: kungfu-v4-self-hosted\n      linux-container-preset: kungfu-verify\n```\n\n`kungfu-verify` resolves to:\n\n```text\nghcr.io/kungfu-systems/build-images/kungfu-verify@sha256:11f0ba64267ce88174a4f73a9bf833ff4e9c59cd16ec3d08a6432a06c2be6fb1\n```\n\nCallers that own a different Linux image can pass it explicitly:\n\n```yaml\nwith:\n  linux-container-preset: custom\n  linux-container-image: ghcr.io/example/project-build@sha256:<digest>\n```\n\n`linux-container-image` should be pinned by digest. A floating tag makes the\nrunner surface mutable and weakens Buildchain's release evidence.\n\nThe workflow splits the matrix into two build jobs:\n\n- Linux platforms go to `build-linux-container` when a Linux container is\n  configured.\n- All other platforms go to `build-native`.\n\nArtifact names, manifest paths, expected artifact checks, publish-source locks,\nand aggregate summaries are the same in both jobs. The split is an execution\ndetail, not a different artifact contract.\n\n## Native Rust Toolchains\n\nNative lifecycle jobs can request an isolated Rust installation instead of\ndepending on a self-hosted runner user's PATH:\n\n```yaml\nwith:\n  setup-rust: true\n  rust-toolchain: \"1.96.0\"\n  rustup-dist-server: \"https://rsproxy.cn\"\n  rustup-update-root: \"https://rsproxy.cn/rustup\"\n  cargo-registry-index: ${{ vars.BUILDCHAIN_CARGO_REGISTRY_INDEX }}\n```\n\n`setup-rust` defaults to `false`, so existing consumers are unchanged. When it\nis enabled, Buildchain installs `rust-toolchain` before the install, build, and\nverify lifecycle stages on every native matrix platform. Windows uses the\nofficial rustup bootstrap through `cmd.exe` and `curl.exe` into runner-temporary\nCargo and rustup homes, so it works under a restrictive PowerShell execution\npolicy and the service account does not depend on another user's PATH or mutate\nhost toolchain state. Pin an exact toolchain for release builds. Linux container jobs continue\nto obtain Rust from their digest-pinned image contract; Buildchain does not\nmutate that container surface.\n\nThe rustup server inputs are optional and default to Rust's official servers.\nConsumers behind a slow cross-border link may select a trusted transport mirror;\nrustup still verifies the selected toolchain's distribution metadata and\ncomponent checksums.\n\n`cargo-registry-index` is also optional. When set, Buildchain exposes it to\nCargo as `CARGO_REGISTRIES_CRATES_IO_INDEX` for every native lifecycle stage,\nso a self-hosted runner can use a repository or organization variable without\ncommitting private LAN topology to public workflow YAML. The endpoint must be a\ncrates.io-compatible index whose `config.json` download contract serves the\nmatching checksum-verified crate archives. An empty value preserves Cargo's\nnormal crates.io behavior.\n\nThe container image provides `fnm` but does not preinstall Node. Buildchain uses\n`fnm` inside the container to install the requested `node-version` before it\nruns Buildchain runtime scripts or lifecycle actions.\n\nDo not use `kungfu-verify` for stages that need CMake, Ninja, ccache, Conan, or\nDocker image publishing. Those should use a heavier native-build image or remain\non a host runner until their image contract is explicit.\n\n## Buildchain Runtime Override\n\nStable consumers should keep the reusable workflow pinned to stable refs such as\n`@v3`. The optional `buildchain-ref` input is empty by default; empty means\nBuildchain resolves and executes the stable runtime selected by the workflow\nshell. The full train validation protocol is documented in\n[`runtime-train-validation.md`](runtime-train-validation.md).\n\nFor one-off manual validation, a trusted maintainer can run the caller workflow\nwith a temporary runtime override:\n\n```yaml\non:\n  workflow_dispatch:\n    inputs:\n      buildchain-ref:\n        description: \"Temporary Buildchain runtime ref for trusted manual validation\"\n        required: false\n        default: \"\"\n\njobs:\n  build:\n    uses: kungfu-systems/buildchain/.github/workflows/.build.yml@v3\n    with:\n      buildchain-ref: ${{ inputs.buildchain-ref || '' }}\n```\n\nAllowed override refs are deliberately narrow:\n\n| Ref form                                | Meaning                                                |\n| --------------------------------------- | ------------------------------------------------------ |\n| `train/v3/v3.0/<capability>`            | Temporary capability train under the active minor line |\n| `refs/heads/train/v3/v3.0/<capability>` | Explicit branch ref for the same train                 |\n| `<40-character SHA>`                    | Exact immutable Buildchain runtime commit              |\n\nOverride requests fail closed unless the event is `workflow_dispatch` and the\nactor has write, maintain, or admin permission on the caller repository. One\nnon-override exact-pin case is also admitted: when the reusable workflow itself\nis invoked from an exact Buildchain SHA and `buildchain-ref` names that identical\nSHA, the run records `pinned-self`. The input cannot select code other than the\nalready-running workflow shell, so protected push and pull-request publication\njobs can retain one immutable runtime root. Different SHA and train requests\nstill fail closed outside trusted manual dispatch.\n\nPull requests, including same-repository pull requests and fork-originated pull\nrequests, cannot select an independent `buildchain-ref` override. This keeps\nautomated PR builds on the stable or exact pinned-self runtime surface.\n\nEvery run resolves the runtime ref to an immutable SHA before checkout. The job\nsummary and aggregate build summary record the workflow shell ref, requested\nruntime ref, resolved runtime ref, runtime SHA, stability class, trust decision,\nand rollback ref. Train refs are development validation refs: they do not move\n`v3`, `vX.Y`, `vX.Y-alpha`, npm dist-tags, or production release refs, and they\nmust not be pinned as long-term production dependencies.\n\nRuntime override validates Buildchain runtime scripts, CLI code, local actions,\nconfig parsing, and lifecycle behavior. It cannot validate changes that require\nthe outer reusable workflow YAML itself to change, such as new jobs,\npermissions, workflow outputs, or matrix topology. Those changes need a canary\nworkflow path or a temporary explicit workflow ref.\n\n## Floating Ref Contract Lock\n\nStable consumers should use floating major refs such as `@v3`, but a floating\nref is not blind trust. Each released Buildchain ref carries a package-owned\nruntime contract world in `dist/site/buildchain-contract.json`. Consumers may\nkeep a small lock file, `.buildchain/contract-lock.json`, recording the\nBuildchain ref, resolved SHA, contract digest, compatibility digest, accepted\nmajor line, and compatibility policy they reviewed.\n\nThe reusable build trust gate checks this lock before any heavy matrix job:\n\n1. resolve the Buildchain runtime ref, for example `v3`, to an immutable SHA;\n2. read `dist/site/buildchain-contract.json` from that checked-out Buildchain\n   ref;\n3. read the consumer's `.buildchain/contract-lock.json`;\n4. compare the accepted contract with the current contract.\n\nSHA drift alone is not a failure. `v3` is expected to advance. Buildchain only\nfails fast when the accepted contract is no longer compatible, for example a\nrequired input is removed, a required output disappears, a protected behavior\npromise changes, or the major line changes. Additive changes such as optional\ninputs, optional outputs, diagnostics, or documentation updates continue under\nthe default `major-compatible` policy.\n\n```yaml\njobs:\n  build:\n    uses: kungfu-systems/buildchain/.github/workflows/.build.yml@v3\n    permissions:\n      contents: read\n      issues: write\n      id-token: write\n    with:\n      buildchain-contract-lock-path: .buildchain/contract-lock.json\n      buildchain-contract-compatibility-policy: major-compatible\n      buildchain-contract-drift-issue-mode: compatible-and-breaking\n```\n\nWhen compatible drift is detected, the build continues and Buildchain opens or\nupdates a low-priority issue in the consumer repository. The issue records the\nold SHA/digest, new SHA/digest, compatibility result, workflow run, and the next\naction: review the Buildchain release notes and update the lock. When breaking\ndrift is detected, the same issue path is used, but the trust gate fails before\nmatrix build or publish work starts. If the workflow token cannot write issues,\nBuildchain writes a copyable issue body into the job summary.\n\nThe lock is intentionally small. It does not copy the full contract. The full\ncontract remains in the Buildchain ref and package; the consumer records only\nwhat it accepted and the policy used to compare future floating-ref movement.\n\nAdvanced alpha-channel consumers select the matching workflow shell:\n\n```yaml\njobs:\n  build:\n    uses: kungfu-systems/buildchain/.github/workflows/.build.yml@v3-alpha\n    with:\n      buildchain-contract-lock-path: .buildchain/contract-lock.json\n```\n\nThe runtime follows the called workflow through `job.workflow_ref`. Callers may\nalso pass `buildchain-ref: v3-alpha` explicitly; official floating refs are\nordinary channel selections and are allowed on pull requests and pushes. Train\nrefs and exact SHAs remain trusted manual overrides.\n\n## Shifu Cache Profile Passthrough\n\nBuildchain can carry one trusted Shifu cache-profile reference and its exact\ndigest into lifecycle execution. Its contract is an opaque reference and digest\nonly. This surface is deliberately opaque:\nBuildchain does not fetch the profile, parse JSON, select cache services,\nrewrite bindings, decide fallback, or emit Shifu resolution evidence. Those\nsemantics remain owned by the consumer's pinned Shifu implementation.\n\n```yaml\njobs:\n  build:\n    uses: kungfu-systems/buildchain/.github/workflows/build.yml@v3\n    with:\n      shifu-cache-profile-ref: ${{ vars.SHIFU_CACHE_PROFILE_REF }}\n      shifu-cache-profile-digest: ${{ vars.SHIFU_CACHE_PROFILE_DIGEST }}\n```\n\nThe reusable workflow passes the pair as `SHIFU_CACHE_PROFILE_REF` and\n`SHIFU_CACHE_PROFILE_DIGEST` to install, build, and verify lifecycle commands.\nThe consumer must invoke its Shifu cache-aware execution surface. An empty pair\npreserves existing behavior; a consumer Shifu should fail closed when exactly\none value is present or the resolved bytes do not match the expected digest.\n\nUse trusted repository or organization variables rather than PR-controlled\nfiles for private/LAN references. The variables must remain secret-free; any\ncredentials use a separate provider-approved secret surface and must not be\nembedded in the profile reference. This passthrough is separate from\nBuildchain's locked source checkout cache below: Buildchain owns checkout\ntransport and source identity, while Shifu owns post-checkout execution cache\nbindings and receipts.\n\n## Locked Source Checkout Cache\n\nSelf-hosted runners that build large repositories can opt into a locked checkout\ncache for both the consumer source and the Buildchain runtime. This changes only\nthe Git object transport. Buildchain still resolves `publish-source-sha` and the\nruntime SHA before any build runner starts, checks out those exact commits, and\nverifies each final `HEAD` plus the resolved consumer source tree SHA before\nlifecycle commands run.\n\n```yaml\njobs:\n  build:\n    uses: kungfu-systems/buildchain/.github/workflows/.build.yml@v3\n    with:\n      runner-preset: kungfu-v4-self-hosted\n      checkout-cache-mode: auto\n      checkout-cache-mirror-url-template: ${{ vars.BUILDCHAIN_CHECKOUT_CACHE_MIRROR_URL_TEMPLATE }}\n      checkout-cache-reference-repository-template: ${{ vars.BUILDCHAIN_CHECKOUT_CACHE_REFERENCE_REPOSITORY_TEMPLATE }}\n      checkout-cache-fallback: github\n      checkout-cache-timeout-seconds: 60\n      checkout-cache-github-timeout-seconds: 600\n      checkout-cache-fetch-attempts: 3\n      checkout-history-mode: shallow\n```\n\n`checkout-cache-mode` accepts:\n\n| Mode      | Behavior                                                                                                    |\n| --------- | ----------------------------------------------------------------------------------------------------------- |\n| `off`     | Default. Buildchain fetches the locked commit from GitHub.                                                  |\n| `auto`    | Try the trusted cache first; on miss, record the miss and fall back according to `checkout-cache-fallback`. |\n| `require` | Require the cache to provide the locked commit and fail before lifecycle work if unavailable.               |\n\n`checkout-history-mode` defaults to `shallow`, preserving the bounded single-\ncommit transport used by ordinary builds. Set it to `full` only when a\nconsumer gate must inspect source ancestry, for example when an Alpha pull\nrequest qualifies GitHub's synthetic merge ref while retained evidence is\nbound to an ancestor of the source-lock head. Full mode still verifies the\nresolved immutable `HEAD` and tree; it changes only whether the advertised\nsource ref is fetched with depth one or with its reachable history.\n\nThe cache can be a local/LAN mirror URL template or a runner-local bare\nreference repository template. Templates support `{owner}`, `{repo}`,\n`{repository}`, `{repositorySlug}`, and `{sha}`. The workflow also reads\nrepository or organization variables named\n`BUILDCHAIN_CHECKOUT_CACHE_MIRROR_URL_TEMPLATE` and\n`BUILDCHAIN_CHECKOUT_CACHE_REFERENCE_REPOSITORY_TEMPLATE`, so consumers can keep\nprivate LAN topology out of repository YAML.\n\nThe GitHub-hosted trust gate resolves the reusable workflow shell to an exact\ncommit and uploads that shell's small checkout bootstrap script. Native and\nLinux-container build jobs download the bootstrap, then use the same cache\npolicy to obtain both the selected Buildchain runtime and consumer source at\ntheir already resolved immutable SHAs. Keeping the bootstrap owned by the\nworkflow shell is important when `@vN-alpha` routes a stable release to an older\n`vN` runtime: the stable runtime does not need to already contain the newest\ncheckout transport implementation. This also prevents a large direct\n`actions/checkout` runtime clone from becoming a separate timeout path on\nconstrained self-hosted uplinks. The bootstrap artifact does not contain the\nruntime repository and cannot move either selected ref.\n\nDo not read cache URLs or reference paths from PR-controlled files such as\n`.buildchain/buildchain.toml`. These values are trusted workflow inputs or repo/org\nvariables. Buildchain does not pass GitHub credentials to cache mirrors or\nreference repositories. If it must fall back to GitHub, the workflow token is\nused only for the GitHub fetch path. Cache attempts use\n`checkout-cache-timeout-seconds`; the potentially larger GitHub fallback uses\nthe independent `checkout-cache-github-timeout-seconds` budget (600 seconds by\ndefault). Buildchain fetches the advertised source ref before trying an exact\nSHA, so a cache hit or stale-cache seed can contribute objects and the fallback\ndoes not first waste a full timeout on an unadvertised SHA. Retryable timeout\nand transient network failures use the bounded `checkout-cache-fetch-attempts`\nbudget; permanent failures stop immediately. Diagnostics record both timeout\nbudgets and the actual GitHub fetch attempts before exact HEAD/tree\nverification.\n\nEach platform diagnostics artifact includes `source-checkout.json` and embeds a\ncompact `sourceCheckout` summary in `diagnostics.json`: mode, transport,\nhit/miss, fallback reason, duration, final HEAD verification, and tree\nverification. Remote URLs are sanitized and local reference paths are represented\nby a short display name plus fingerprint, not by secret-bearing credentials.\nRuntime checkout evidence is uploaded separately as `runtime-checkout.json`,\nincluding cache transport, fallback attempts, and exact runtime `HEAD`\nverification, even when a later lifecycle step fails.\n\n## Auditable Compiler Cache\n\nConsumers can prepare `sccache` on selected platforms after the install\nlifecycle and before compilation:\n\n```yaml\nwith:\n  compiler-cache-provider: sccache\n  compiler-cache-platforms-json: '[\"windows-x64\"]'\n  compiler-cache-required: true\n```\n\nThe consumer remains responsible for installing and pinning the tool before\nthe preparation step. Buildchain probes its version, runs `sccache\n--zero-stats`, and writes\n`compiler-cache-preparation.json`. The receipt binds the source commit/tree,\nBuildchain runtime, platform, cache profile, and any declared dependency,\ntoolchain, or policy roots. It resets counters only; it does not delete cached\ncompiler outputs.\n\nFinal diagnostics admit sccache hit/miss outcomes as current-run evidence only\nwhen that preparation receipt is present and valid. A bare `sccache\n--show-stats` result without the reset receipt remains cumulative and is\nreported as unavailable for the current run. The preparation receipt is copied\ninto the small diagnostics artifact and sealed by\n`diagnostics-manifest.json`.\n\nWhen a Buildchain maintainer asks for downstream validation, the expected\nrequest is:\n\n```text\nBuildchain train ready: buildchain-ref=train/v3/v3.0/<capability>.\nKeep uses: ...@v3; run workflow_dispatch with that buildchain-ref and report the runtime evidence summary.\n```\n\nAfter validation succeeds, the Buildchain change should continue through the\nnormal mainline and release path. Do not treat the train as a pending merge\nitem; it is only a temporary fast-use, diagnostic, and rollback channel. It may\nremain for a retention window after release, with old trains handled by a\nseparate periodic cleanup task.\n\n## Workflow Outputs\n\nThe reusable workflow exposes the resolved contract:\n\n| Output                                | Meaning                                                                                                                                      |\n| ------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------- |\n| `runner-preset`                       | Resolved preset, or `custom` when `platforms-json` was provided                                                                              |\n| `platforms-json`                      | Exact matrix JSON used by the build job                                                                                                      |\n| `platform-count`                      | Number of matrix platforms                                                                                                                   |\n| `linux-container-enabled`             | `true` when Linux platforms are routed through a job container                                                                               |\n| `linux-container-image`               | Resolved digest-pinned Linux job container image                                                                                             |\n| `build-summary-artifact`              | Uploaded aggregate summary artifact name                                                                                                     |\n| `build-diagnostics-summary-artifact`  | Uploaded aggregate diagnostics summary artifact name                                                                                         |\n| `release-candidate-passport-artifact` | Uploaded PR-stage release-candidate passport artifact name when `release-candidate` is enabled                                               |\n| `release-candidate-passport-json`     | Compact release-candidate passport JSON when `release-candidate` is enabled                                                                  |\n| `build-summary-json`                  | Compact aggregate JSON with platform count, file count, and byte total                                                                       |\n| `build-diagnostics-summary-json`      | Compact aggregate diagnostics JSON with platform, lifecycle warning/error, diagnostics contract warning, and sidecar manifest warning totals |\n| `trusted-event`                       | `true` when the event is trusted enough to reach build runners                                                                               |\n| `buildchain-runtime-ref`              | Runtime ref selected after applying the empty-default or override policy                                                                     |\n| `buildchain-runtime-sha`              | Immutable Buildchain runtime commit used by all runtime checkouts                                                                            |\n| `buildchain-runtime-class`            | `stable`, `alpha`, `authority`, `train`, `exact-sha`, or `development`                                                                       |\n| `buildchain-runtime-override`         | `true` when an authority, train, or exact-SHA `buildchain-ref` override was accepted                                                         |\n| `buildchain-runtime-trust-decision`   | Runtime override trust decision                                                                                                              |\n| `buildchain-contract-lock-status`     | `unchanged`, `compatible-drift`, `breaking-drift`, `missing-lock`, `non-floating-runtime`, or first-release `runtime-contract-unavailable`   |\n| `buildchain-contract-lock-drift`      | `true` when the floating runtime SHA or contract digest changed                                                                              |\n| `buildchain-contract-digest`          | Current Buildchain runtime contract digest                                                                                                   |\n| `publish-channel`                     | Resolved publish channel requested by the caller                                                                                             |\n| `publish-allowed`                     | `true` only when this event/ref may publish after verification                                                                               |\n| `publish-reason`                      | Human-readable reason for the publish gate decision                                                                                          |\n| `publish-source-ref`                  | Gate source ref that was resolved before checkout                                                                                            |\n| `publish-source-sha`                  | Exact source commit used by checkout, build, verify, and artifacts                                                                           |\n| `publish-source-locked`               | `true` when a `publish-gate/*` source ref was explicitly locked                                                                              |\n| `publish-source-channel`              | `alpha`, `release`, `anchor`, or `major` parsed from the source ref                                                                          |\n| `publish-source-line`                 | Product line parsed from source refs such as `v22/v22.22`                                                                                    |\n| `publish-source-consumer-version`     | Consumer package version parsed from source refs                                                                                             |\n| `release-manifest-json`               | Resolved release manifest including source lock, version state, and anchor data                                                              |\n\nThe aggregate summaries are intentionally artifacts as well as outputs. GitHub\nActions matrix outputs are not a reliable place to carry every platform's full\nmanifest, so Buildchain uploads each platform manifest and then emits one\naggregate build summary artifact after the matrix completes. Buildchain uploads\n`diagnostics-summary.json` as a separate aggregate diagnostics summary artifact,\na compact rollup of each platform's small diagnostics upload. The rollup keeps\nper-platform runner facts, checked tool versions/missing tools, package\nmanager/cache directory details, compiler-cache availability, lifecycle timing,\nprocess sampler context, and links back to the exact platform artifacts. Each\nplatform diagnostics upload includes `diagnostics.json`,\n`diagnostics-manifest.json`, the lifecycle `events.jsonl`, and process sampler\nsidecars when enabled, so slow-build diagnosis does not require downloading the\nbinary platform artifact or the aggregate build summary. The sidecar manifest\nrecords the uploaded diagnostics files with bytes and sha256 hashes. Each\n`diagnostics.json` also records the related binary artifact name, manifest\nartifact name, diagnostics artifact name, diagnostics sidecar manifest path, and\nplatform id in `links`, so a reviewer can navigate from the small diagnostics\nartifact back to the exact platform outputs when deeper inspection is needed.\nThe workflow output `build-diagnostics-summary-json` includes\n`diagnosticsContractWarningCount` and `diagnosticsManifestWarningCount` so\nrelease jobs can detect drifting diagnostics JSON contracts and missing or\ndrifting diagnostics sidecar manifests without downloading the per-platform\ndiagnostics artifacts first.\n\n## Artifact Signing Authority\n\nArtifact signing is a Buildchain capability, not a macOS application workflow.\nConsumers declare desired signature state next to their artifact facts; they do\nnot configure certificates, Team IDs, notary credentials, protected\nenvironments, authority roles, or signing jobs:\n\n```toml\n[[signing.artifacts]]\nid = \"native-engine\"\npath = \"dist/kungfu-engine\"\nprofile = \"auto\"\nkind = \"mach-o\"\nplatforms = [\"macos-arm64\", \"macos-x64\"]\n```\n\nEvery native and container build lane reads this declaration after the build\nlifecycle and before verification. Buildchain binds the exact artifact bytes or directory tree to\nthe caller repository, source commit, source tree, immutable runtime, platform,\nand requested signature semantics, then publishes a deterministic\n`<artifact>-signing-request-<platform>-<source-sha>` request. No consumer\nworkflow step is required. The lifecycle runner automatically adds declarations\nselected for the current platform to the `build` manifest scan, including\nsubjects outside the caller's ordinary `artifact-paths`; this extends the\nevidence preimage without silently adding those subjects to the ordinary\nartifact upload.\n\nThe request root is a Buildchain-owned generated output. After the declaration,\nlifecycle manifest, and source paths pass validation, sealing replaces that root\nbefore materializing the current request set. This keeps repeated jobs on a\nself-hosted runner idempotent and prevents stale requests from an earlier run\nfrom entering the uploaded request artifact. An output root that contains the\nworkspace, working directory, lifecycle manifest, or any declared subject is\nrejected before cleanup.\n\nSelf-hosted runners whose network requires different routes for Artifact upload\nand download can scope an upload-only proxy bypass to the sealed signing request:\n\n```yaml\nwith:\n  artifact-signing-request-upload-no-proxy: \".blob.core.windows.net\"\n```\n\nThe caller repository variable\n`BUILDCHAIN_ARTIFACT_SIGNING_REQUEST_UPLOAD_NO_PROXY` provides the same value\nwithout changing a consumer workflow; an explicit workflow input takes\nprecedence. When neither is set, Buildchain preserves the runner's existing\n`NO_PROXY` and `no_proxy` values. The resolved value applies only to the\nBuildchain-owned signing-request upload. Authority dispatch and immutable\nsigned-result download keep the runner's original proxy route. This is a\ntransport control only: it does not change request bytes, signing authority,\nartifact identity, or verification policy.\n\n`profile = \"auto\"` resolves signable Apple artifacts such as Mach-O files,\n`.dylib`, `.framework`, `.app`, `.xpc`, `.plugin`, `.pkg`, `.dmg`, and macOS\narchives containing native code to the native `apple-developer-id` provider.\nFor a declared macOS `archive`, the authority safely extracts the sealed\ncontainer, signs and verifies every Mach-O payload, signs Mach-O payloads inside\nembedded Python wheels, rebuilds each affected wheel's PEP 427 `RECORD`, and\nrecreates the original zip or tar.gz before returning the exact final bytes.\nWindows `pe` and `binary` artifacts\nresolve to timestamped native `windows-authenticode`; Windows PE never falls\nback to a detached signature. Linux and other non-native binary files,\narchives, blobs, and directories resolve to `detached-signature-v1`. Buildchain records that as a\ndetached cryptographic signature and never misrepresents it as an operating\nsystem code signature. Explicit incompatible provider/kind/platform\ncombinations fail closed.\n\nThe request schema rejects credential and authority-infrastructure fields. The\nBuildchain-owned signing authority is responsible for credential selection,\nnative signing, notarization where applicable, immutable result delivery, and a\nreceipt bound to the request digest, runtime SHA, output digest, and signature\nevidence. Consumer repositories neither receive nor duplicate credential-island\nmaterial. The reusable workflow dispatches the sealed request to the\nBuildchain repository, waits for its protected authority workflow, verifies the\nimmutable result, replaces only the declared artifact with the returned final\nbytes. The ordinary platform lane completes the consumer's functional\nverification before delegation. A GitHub-hosted finalization lane then verifies\nthe authority result against the sealed request, imports the exact signed bytes,\nand recomputes the final manifest before replacing the deterministic artifact.\nThe signing result is never downloaded back to a self-hosted native runner.\nPlatform manifests, KFD evidence, checksums, and Release Passport inputs\ntherefore observe the final signed artifact rather than the pre-signing build\noutput.\n\nFor a standalone Mach-O request, the authority requires strict Developer ID\nverification, the declared Team ID, hardened runtime, and an `Accepted`\n`notarytool` result for the exact submission. Apple creates the notarization\nticket for that binary and publishes it online, but\n[standalone binaries do not support stapling](https://developer.apple.com/documentation/security/customizing-the-notarization-workflow).\nBuildchain therefore records\n`standalone-notary-ticket-online` and does not misapply app-bundle\n`spctl --assess --type execute` semantics to the raw executable.\n\nFor a compound archive request, the authority notarizes the complete extracted\nsigned product tree and records `compound-notary-ticket-online`. A generic\narchive container cannot carry a stapled ticket and is not itself a Gatekeeper\nexecution target; Gatekeeper evaluates the extracted signed code. Archive path\nand symlink validation fail closed before any payload is signed.\n\nFor a declared `app-bundle`, the same protected authority extracts the sealed\napplication, derives and verifies its bundle identity, signs nested native code,\nsubmits both the application and disk image for notarization, staples and\nGatekeeper-assesses both deliverables, and returns a ZIP, DMG, evidence document,\nand source-bound manifest. The reusable workflow verifies those returned bytes\non GitHub-hosted infrastructure, adds them to the normal macOS platform payload,\nand publishes a separate `<artifact>-macos-credential-<source-sha>` projection\nfor release pipelines that consume the credential-island evidence contract.\nConsumers declare the `.app` under `[[signing.artifacts]]`; they do not configure\nan environment, certificate, notary credential, or authority workflow.\n\nThe durable v3 authority runtime is\n`authority/v3/v3.0/artifact-signing`. It is channel-neutral: alpha and stable\nrelease work use the same protected `buildchain-artifact-signing` environment\nand provider identities. The authority ref is protected independently from\nrelease channels and can advance only through reviewed, checked changes; the\ntemporary `train/v3/v3.0/artifact-signing-authority` ref is retained only as a\nbounded migration rollback.\n\nThe older `credential-island-macos-*` reusable-workflow inputs remain a\ncompatibility surface while existing callers migrate. They are not the target\nconsumer contract and must not be used to design new integrations.\n\n## Artifact Transfer Relay\n\nBy default, platform jobs upload payloads, manifests, and diagnostics directly\nto GitHub artifacts:\n\n```yaml\nwith:\n  artifact-transfer-mode: github-artifacts\n  artifact-compression-level: 0\n```\n\nDirect GitHub Artifact payloads default to compression level `0`. Buildchain\nartifacts are commonly already-compressed archives; storing them without a\nsecond compression pass shortens the upload window while preserving the same\nartifact name, run/id/digest binding, retention, and no-overwrite behavior.\nCallers may select `1` through `9` for payloads that materially benefit from\ncompression. Manifests and diagnostics retain their existing small-artifact\nbehavior.\n\nLarge self-hosted native builds can opt into the first-class S3 relay path:\n\n```yaml\njobs:\n  build:\n    uses: kungfu-systems/buildchain/.github/workflows/.build.yml@v3\n    with:\n      runner-preset: kungfu-v4-self-hosted\n      artifact-transfer-mode: s3-to-github-artifacts\n      artifact-relay-s3-bucket: ${{ vars.BUILDCHAIN_ARTIFACT_RELAY_S3_BUCKET }}\n      artifact-relay-s3-region: ${{ vars.BUILDCHAIN_ARTIFACT_RELAY_S3_REGION }}\n      artifact-relay-s3-prefix: ${{ vars.BUILDCHAIN_ARTIFACT_RELAY_S3_PREFIX }}\n```\n\nIn relay mode, each self-hosted platform job uploads the heavy payload files to\nS3 and uploads only a small `relay-manifest.json` to GitHub. A GitHub-hosted\n`relay-artifacts` job then assumes the configured download role, downloads the\npayloads from S3, verifies every file by SHA256, and re-uploads the normal\nGitHub artifacts under the same artifact names that direct mode uses. Downstream\nsummary, release-candidate, and promote-only workflows therefore continue to\nconsume GitHub artifacts and do not need custom S3 logic.\nThe relay implementation uses Node.js plus the standard AWS environment\ncredentials from GitHub OIDC; runner images and build containers do not need the\nAWS CLI installed.\n\nAfter the GitHub artifact uploads succeed, Buildchain deletes the S3 objects\nlisted in the relay manifest for that platform. If any download, verification,\nor GitHub artifact upload fails, cleanup is skipped so maintainers can inspect\nthe retained S3 payload. Configure a short bucket lifecycle expiration as a\ncost and cleanup backstop.\n\nThe relay configuration is intentionally generic. Buildchain does not hard-code\norganization buckets, regions, or role ARNs. Callers may pass explicit inputs,\nor set repository/organization variables and secrets using these names:\n\n| Variable or secret                               | Meaning                                                 |\n| ------------------------------------------------ | ------------------------------------------------------- |\n| `BUILDCHAIN_ARTIFACT_RELAY_S3_BUCKET`            | Relay bucket name                                       |\n| `BUILDCHAIN_ARTIFACT_RELAY_S3_REGION`            | Relay bucket region                                     |\n| `BUILDCHAIN_ARTIFACT_RELAY_S3_PREFIX`            | Relay object prefix; defaults to `buildchain-artifacts` |\n| `BUILDCHAIN_ARTIFACT_RELAY_S3_ROLE_ARN`          | Shared OIDC role ARN for upload and download            |\n| `BUILDCHAIN_ARTIFACT_RELAY_S3_UPLOAD_ROLE_ARN`   | Upload OIDC role ARN for self-hosted build jobs         |\n| `BUILDCHAIN_ARTIFACT_RELAY_S3_DOWNLOAD_ROLE_ARN` | Download OIDC role ARN for the GitHub-hosted relay job  |\n| `BUILDCHAIN_ARTIFACT_RELAY_S3_OIDC_AUDIENCE`     | Optional OIDC audience override                         |\n\nFor AWS China regions, Buildchain defaults the OIDC audience to\n`sts.amazonaws.com.cn`; other regions default to `sts.amazonaws.com`. The caller\nworkflow must allow `id-token: write`, and the target role trust policy should\nrestrict GitHub OIDC claims to the expected organization, repository, workflow,\nand branch/ref. The S3 permissions should be scoped to the relay bucket/prefix\nused by the repository.\nUpload roles need write/delete access under the relay prefix; download roles\nneed read access plus delete access for successful cleanup.\n\nRelay mode is opt-in and does not affect forks or open-source users that do not\nconfigure S3. Missing bucket, region, upload role, or download role values fail\nbefore the heavy build matrix is scheduled. Buildchain treats S3 as a transport\ncache, not as the final release evidence store; the final audit entry remains\nthe GitHub artifact set plus the Buildchain build summary and release-candidate\npassport.\n\nSet `release-candidate: true` when the successful reusable build is meant to be\nthe artifact source promoted later. Buildchain then uploads\n`release-candidate-passport.json` under the\n`<artifact-name>-release-candidate-<publish-source-sha>` artifact name. Promotion\njobs can pass that passport to `promote-buildchain-ref` with\n`promote-only-release-candidate: \"true\"` so source, channel, platforms, and the\naggregate build-summary hash are checked before publish-gate side effects. The\npassport records the locked commit's Git tree SHA, so a post-merge channel HEAD\ncan be accepted only when it is tree-equivalent to the PR-stage build evidence.\n\n## Publish Gate\n\nBuildchain separates \"may build/verify\" from \"may publish.\" A same-repository\npull request may be trusted enough to run the build matrix, but it still must\nnot publish packages, S3 objects, release pages, or preview aliases. Publishing\nis allowed only when the caller explicitly requests a channel and the current\nevent/ref matches that channel.\n\nUse `publish-channel` to request a channel:\n\n```yaml\njobs:\n  build:\n    uses: kungfu-systems/buildchain/.github/workflows/.build.yml@v3\n    with:\n      publish-channel: release\n\n  publish:\n    needs: build\n    if: ${{ needs.build.outputs.publish-allowed == 'true' }}\n    runs-on: ubuntu-24.04\n    steps:\n      - run: ./scripts/publish.sh\n```\n\nDefault channels are:\n\n| Channel   | Allowed refs                                                                                         |\n| --------- | ---------------------------------------------------------------------------------------------------- |\n| `none`    | Never publishes; this is the default                                                                 |\n| `alpha`   | `alpha/vN/vN.M` branches or exact `vN.M.P-alpha.K` tags                                              |\n| `release` | `release/vN/vN.M` branches or release tags such as `vN.M.P`, `vN.M`, `vN`                            |\n| `major`   | `publish-gate/major`, legacy `major-gate`, or next-major release tags such as `vN.0.0`, `vN.0`, `vN` |\n\nPull request events always produce `publish-allowed=false`, even when the PR is\nfrom the same repository. Untrusted fork events also produce\n`publish-allowed=false`; with the default `untrusted-policy: fail`, the workflow\nthen fails before any build runner starts.\n\nProjects with their own channel names can pass `publish-refs-json`:\n\n```yaml\nwith:\n  publish-channel: nightly\n  publish-refs-json: >-\n    {\"nightly\":[\"^refs/heads/nightly/v\\\\d+$\"]}\n```\n\nThe aggregate build summary includes the same publish gate decision under\n`publishGate`, so a downloaded artifact summary explains both what was built and\nwhy it was or was not eligible to publish.\n\n## Publish Source Lock\n\n`publish-channel` answers \"may this event publish?\" Source lock answers \"which\nsource tree is the publish decision about?\" A caller can pass `publish-source-ref`\nto bind a publish run to a reviewed gate branch before any checkout happens:\n\n| Ref                                              | Meaning                                                                     |\n| ------------------------------------------------ | --------------------------------------------------------------------------- |\n| `publish-gate/alpha/<line>/<consumer-version>`   | Build and publish an alpha candidate for a consumer line                    |\n| `publish-gate/release/<line>/<consumer-version>` | Build and publish a production candidate for a consumer line                |\n| `publish-gate/anchor`                            | Resolve an explicit anchor request; it does not publish artifacts by itself |\n| `publish-gate/major`                             | Gate the next major source state                                            |\n| `major-gate`                                     | Legacy compatibility alias for the major gate                               |\n\nFor alpha and release refs, `<line>` is intentionally allowed to contain `/`, so\nKungfu-style lines such as `v22/v22.22` stay readable. The final path segment is\nthe consumer-visible version, for example `22.22.3-kf.0`.\n\nThe reusable workflow resolves the branch tip to `publish-source-sha`, checks out\nthat SHA in every build job, and uses the same SHA in artifact names, manifests,\nand aggregate summaries. Reruns therefore rebuild the same source tree even if a\ngate branch moves later.\n\nBefore any heavy build matrix is scheduled, the workflow also verifies that the\ntarget channel ref implied by the source lock already points at\n`publish-source-sha` and that the target channel HEAD came from the required\nmerged same-repository channel PR. `publish-gate/alpha/<line>/<version>` must\nmatch `alpha/<line>` and have PR lineage `dev/<line> -> alpha/<line>`;\n`publish-gate/release/<line>/<version>` must match `release/<line>` and have PR\nlineage `alpha/<line> -> release/<line>`. If either check fails, the run fails\nfast with a diagnostic telling maintainers to merge the source commit through\nthe channel PR first. This keeps verify from spending runner time on a source\ntree that cannot legally enter the requested publish channel.\n\nThe resolved release manifest is uploaded as an artifact and emitted as\n`release-manifest-json`. It records:\n\n- source ref, source SHA, channel, line, and consumer version;\n- configured version strategy and configured version-state files;\n- each version file's value, with release gates failing closed if the configured\n  files do not equal the consumer version;\n- anchor manifest summary for anchored/manual projects;\n- explicit anchor request JSON for `publish-gate/anchor`;\n- publish registry, dist-tag, and gate visibility metadata.\n\nPublish side-effect jobs should verify the lock immediately before publishing:\n\n```yaml\n- name: Verify publish gate did not move\n  run: node .buildchain/runtime/scripts/verify-publish-source-lock.mjs\n  env:\n    BUILDCHAIN_PUBLISH_SOURCE_REF: ${{ needs.build.outputs.publish-source-ref }}\n    BUILDCHAIN_PUBLISH_SOURCE_SHA: ${{ needs.build.outputs.publish-source-sha }}\n    BUILDCHAIN_SOURCE_REPOSITORY: ${{ github.repository }}\n    GITHUB_TOKEN: ${{ github.token }}\n```\n\nIf the branch tip no longer matches the manifest SHA, the publish job must fail\nclosed. Moving a gate branch creates a new publish decision and should produce a\nnew build run.\n\n## Release Candidate Promote-Only\n\nFor native package sets, the PR build is the only heavy build. When a PR targets\n`alpha/<line>` or `release/<line>`, `.build.yml` uploads a release-candidate\nbundle next to the platform artifacts. The bundle contains:\n\n- `release-candidate.passport.json`;\n- the aggregate `build-summary.json`;\n- copied platform manifest evidence for the built platforms.\n\nThe passport records two separate source identities:\n\n- `builtSourceSha` / `builtSourceTreeSha`: the PR-stage source that produced the\n  artifacts, usually the PR merge ref;\n- `promotionChannelSha` / `promotionChannelTreeSha`: the post-merge channel\n  commit used for publish authority.\n\nThe reusable promote wrapper resolves the merged PR, finds exactly one matching\nPR-stage release-candidate artifact, downloads it with the build summary and\npayload artifacts from the same PR-stage run, validates the payload count,\ncompares the built tree with the promotion channel tree, locks\n`publish-gate/{alpha,release,major}` to the promotion channel commit, and then\ncalls `actions/promote-buildchain-ref` with\n`promote-only-release-candidate: \"true\"` and\n`require-publish-source-lock: \"true\"`. The wrapper passes the created\n`publish-gate/*` ref, target SHA, and `locked=true` into the promote action, so\nfloating `@v3` consumers receive publish-side source-lock drift protection by\ndefault. It also defaults `branch-protection-bypass-apps` to `github-actions`\nso the workflow automation can apply generated version-state and channel\nbookkeeping on protected `dev`/`alpha`/`release` branches after the reviewed\nchannel PR has merged. Other App slugs and all user or team bypass actors are\nrejected. The wrapper uses the run-scoped `github.token` as the generated ref\nupdate token for protected bookkeeping PATCH calls, so the exact GitHub Actions\nApp authority can sync dev immediately after alpha/release publish without a\npost-publish PR.\nIt does not call `.build.yml`, does not create a matrix, and must fail before\npublish if the RC evidence, payload set, or source-lock ref is missing or\nambiguous.\n\nThe public `release-candidate-promote.yml` is a generated channel router. It\nderives the publication lane from `target-ref`, then selects the matching\nadvanced workflow shell, runtime, and consumer lock before the advanced\npromotion starts:\n\n- alpha targets use `.release-candidate-promote.yml@vN-alpha`, runtime\n  `vN-alpha`, and `buildchain-alpha-contract-lock-path`;\n- release and major targets use `.release-candidate-promote.yml@vN`, runtime\n  `vN`, and `buildchain-stable-contract-lock-path`.\n\nThe generated router also owns the stable-shell layout transition through\n`.buildchain/promotion-shell-routing.json`. The v3 stable and alpha lanes call\nthe hidden advanced workflow at the exact immutable SHA behind their selected\nv3 channel state and forward the complete internal promotion identity surface.\nThe logical shell identity remains `vN`, and the router retains it in the public\naudit outputs. The internal advanced-shell call receives the exact call ref\nselected by the routing configuration, so its called-workflow ref check and\ncheckout SHA both bind to the same immutable identity. Updating a routing pin\nafter a release does not require any consumer declaration change.\n\nThe router resolves immutable SHAs and the selected lock digest before candidate\ndownload. The advanced shell verifies the same router, shell, runtime, lock,\nchannel, and target binding again. Train and exact-SHA runtime overrides remain\nrestricted to trusted `workflow_dispatch` actors with write, maintain, or admin\npermission. Promotion controller evidence, the promotion copy of the release\ncandidate passport, and the final release passport record these identities.\n\n```yaml\njobs:\n  promote:\n    uses: kungfu-systems/buildchain/.github/workflows/release-candidate-promote.yml@v3\n    secrets:\n      buildchain-issue-app-id: ${{ secrets.BUILDCHAIN_ISSUE_APP_ID }}\n      buildchain-issue-app-private-key: ${{ secrets.BUILDCHAIN_ISSUE_APP_PRIVATE_KEY }}\n    with:\n      buildchain-channel: auto\n      buildchain-alpha-contract-lock-path: .buildchain/alpha-contract-lock.json\n      buildchain-stable-contract-lock-path: .buildchain/contract-lock.json\n      channel: alpha\n      target-ref: alpha/v22/v22.22\n      artifact-name: libnode\n      # Defaults to build.yml / Build. Override only when the PR-stage build\n      # workflow uses a different file or display name.\n      release-candidate-workflow-file: build.yml\n      release-candidate-workflow-name: Build\n      package-manager: npm\n      publish-target: npm\n      runner-preset: github-hosted\n      trusted-publishing: true\n      github-release: true\n      required-status-check: check / check\n      required-artifact-count: 3\n      publish-dist-tag: alpha\n      publish-package-set-order: platforms-first-main-last\n      publish-package-main: \"@kungfu-tech/libnode\"\n      release-passport-product-name: Libnode\n      buildchain-contract-drift-issue-mode: compatible-and-breaking\n```\n\nExisting callers may keep `buildchain-contract-lock-path`; a non-empty explicit\npath overrides channel-specific selection for compatibility. Migration only\nrequires adding the two channel lock inputs and may retain the remaining common\npromotion declaration unchanged. Consumers must not call the dot-prefixed\nadvanced workflow directly.\n\n`buildchain-issue-app-id` and `buildchain-issue-app-private-key` are optional\nbut recommended for cross-repository consumers. They should identify a GitHub\nApp installation with `issues: write` on `kungfu-systems/buildchain`; the\nwrapper mints the installation token before calling\n`actions/report-buildchain-issue`. Consumers can also pass a pre-minted\n`buildchain-issue-token`. If both are omitted, the wrapper falls back to\n`BUILDCHAIN_ISSUE_TOKEN`, `BUILDCHAIN_PROMOTION_TOKEN`, and then the consumer\nworkflow's `github.token`; the last fallback can only report issues when it has\nwrite access to the target Buildchain repository.\n\n`publish-required-artifacts-json` can still be passed explicitly for custom\npublish targets. Custom OCI requirements may omit pre-publish refs and digests;\nthe action resolves the exact version ref and validates final digests and any\nbuilt/reused provenance after `lifecycle.publish`. For the default\n`publish-artifact-kind: npm` path, consumers do\nnot download artifacts or run repository scripts to build publish evidence. The\nwrapper downloads the PR-stage payload artifacts, finds the downloaded `.tgz`\npackages, reads each tarball's `package/package.json` for the real scoped\npackage name and version, computes the npm `sha512-...` integrity from the\ntarball bytes, marks the package matching `publish-package-main` as `role:\nmain`, marks the rest as `role: platform`, and passes the generated\n`publish-required-artifacts-json` to `promote-buildchain-ref` before any publish\nside effect. Downloaded platform manifests are still passed into the release\npassport unless `release-passport-platform-manifest-paths` is set explicitly.\nThe same Buildchain contract lock check runs before release-candidate\nresolution and before publish. A compatible `v3` drift leaves an issue in the\nconsumer repository but does not trigger a second heavy build; an incompatible\ndrift fails before publish side effects.\n\nThe wrapper publishes the public release tag as a GitHub Release by default.\nAfter `promote-buildchain-ref` reports a complete release transaction, the\nwrapper creates or updates the public release, marks semver prerelease tags\nsuch as `v1.2.3-alpha.0`, `v1.2.3-rc.1`, or `v22.22.3-kf.3-alpha.7` as\n`prerelease=true` and `make_latest=false`, marks stable semver tags as latest,\nand uploads the publish evidence file plus every file in the generated release\npassport directory, including `buildchain.release.json` and `check-report.json`.\nFor anchored/manual package releases, the public release tag is derived from the\npublished package version and the internal exact transaction tag remains\navailable in the release passport.\nConsumers do not need to hand-write `gh release` logic to trigger\n`release.published` propagation. Set `github-release: false` only for\nrepositories that intentionally do not maintain GitHub Releases.\nIf the transaction still needs protected-ref finalization, the wrapper defers\nGitHub Release creation until the later run that reaches `state=complete`.\n\nCustom publish jobs can also repeat the channel-ref preflight:\n\n```yaml\n- name: Verify publish channel ref still matches\n  run: node .buildchain/runtime/scripts/verify-publish-channel-ref.mjs\n  env:\n    BUILDCHAIN_PUBLISH_SOURCE_REF: ${{ needs.build.outputs.publish-source-ref }}\n    BUILDCHAIN_PUBLISH_SOURCE_SHA: ${{ needs.build.outputs.publish-source-sha }}\n    BUILDCHAIN_SOURCE_REPOSITORY: ${{ github.repository }}\n    GITHUB_TOKEN: ${{ github.token }}\n```\n\nAnchored/manual package release jobs should also make the Buildchain promotion\naction validate that publication is entering through the same\n`publish-gate/{alpha,release,major}` source-lock contract before any package\npublish side effect:\n\n```yaml\n- name: Promote release ref and publish npm package set\n  uses: kungfu-systems/buildchain/actions/promote-buildchain-ref@v3\n  with:\n    sha: ${{ needs.build.outputs.publish-source-sha }}\n    target-ref: release/v22/v22.22\n    require-publish-source-lock: \"true\"\n    publish-source-ref: ${{ needs.build.outputs.publish-source-ref }}\n    publish-source-sha: ${{ needs.build.outputs.publish-source-sha }}\n    publish-source-locked: ${{ needs.build.outputs.publish-source-locked }}\n```\n\n`target-ref` stays the Buildchain channel promotion target, such as\n`alpha/v22/v22.22`, `release/v22/v22.22`, or `publish-gate/major`.\n`publish-source-ref` is the reviewed source-lock branch that authorized this\nspecific package publication. For alpha and release package publications, the\nsource-lock branch must point at the exact channel-line commit that promotion is\nvalidating; it is not a replacement for `target-ref`.\n\nThis keeps the version bump commit, publish authorization, and auditable publish\nentrypoint on the Buildchain source-lock protocol. The CLI form\n`buildchain publish-source validate-anchored-release --json` is still useful for\ncustom publish scripts, but the preferred GitHub Actions gate is the promotion\naction input above. A publish job that still runs directly from `alpha/*` or\n`release/*` channel branches fails this check because those refs are channel\nstate, not publish-gate decisions.\n\n## Package-Set Publish Plan\n\nProjects that publish multiple packages should treat package publication as a\npackage-set operation. Buildchain's package-set planner uses these rules:\n\n- platform packages publish first;\n- the main package publishes last;\n- the dist-tag move happens only after the full package set is present;\n- reruns accept already-published packages only when package name, version, and\n  integrity match;\n- an existing package with different integrity is a hard failure.\n\nThis keeps a consumer from observing a floating dist-tag that points to a main\npackage before all platform artifacts for the same source SHA are available.\n\n## Command Sources\n\nThe workflow runs `.buildchain/buildchain.toml` lifecycle stages by default:\n\n```toml\n[lifecycle.install]\ncommand = \"corepack yarn install --immutable\"\n\n[lifecycle.build]\ncommands = [\n  \"corepack yarn make\",\n  \"corepack yarn build\",\n]\n\n[lifecycle.verify]\ncommand = \"corepack yarn test\"\n```\n\nCallers can override any stage for one invocation:\n\n```yaml\nwith:\n  build-command: cmake --build build --config Release\n  verify-command: ctest --test-dir build --output-on-failure\n```\n\nEvery native and container matrix job is bounded by\n`lifecycle-timeout-minutes`, which defaults to 120 minutes. The same input is\nthe fallback deadline for each install, build, and verify action, so a hung\ncommand fails with the lifecycle name and matrix platform before it can occupy\na self-hosted runner indefinitely. A stage-level `timeout_minutes` in\n`buildchain.toml` remains the more specific override for that stage.\n\n```yaml\nwith:\n  lifecycle-timeout-minutes: 90\n```\n\nThe reusable build workflow samples the build lifecycle by default and carries\nthe generated summary into the final verify diagnostics. Callers can override\nthe sidecar path or disable sampling:\n\n```yaml\nwith:\n  sample-process-tree: true\n  process-summary-path: .buildchain/diagnostics/process-summary.json\n  process-sample-interval-ms: 15000\n  requested-parallelism: 20\n```\n\nWhen `sample-process-tree` is true, Buildchain wraps either `build-command` or\nthe configured `lifecycle.build` stage with `buildchain sample process-tree`.\nThe path is relative to the checked-out workspace and is read again during the\nfinal verify lifecycle. Custom workflows can still write their own sampler\nsummary and pass `process-summary-path`; Buildchain reads the file after the\nlifecycle command finishes, so it may be produced during the same invocation.\nWhen the build stage is optional, the reusable workflow treats the default\nsampler path as optional during verify; an explicitly supplied\n`process-summary-path` remains required.\n\nFor custom workflows, use the action directly:\n\n```yaml\n- uses: kungfu-systems/buildchain/actions/run-lifecycle@v3\n  with:\n    stage: build\n    required: \"true\"\n    timeout-minutes: \"90\"\n    artifact-name: libnode-linux-x64-${{ github.sha }}\n    artifact-paths: |\n      dist\n      build/stage\n```\n\n## Artifact Contract\n\nEach platform upload uses `artifact-name-template`. The default is:\n\n```text\n{artifact}-{platform}-{sha}\n```\n\nSupported placeholders are `{artifact}`, `{artifactName}`, `{platform}`,\n`{platformId}`, `{platformName}`, `{sha}`, `{shortSha}`, `{ref}`, `{runId}`,\nand `{runAttempt}`. Invalid GitHub artifact name characters are normalized to\n`-`, so `{ref}` remains deterministic even for refs such as\n`refs/heads/dev/v3/v3.0`.\n\nEach platform also writes and uploads:\n\n```text\n.buildchain/artifacts/<platform-id>/manifest.json\n.buildchain/artifacts/<platform-id>/summary.json\n```\n\nThe manifest schema is:\n\n```json\n{\n  \"schemaVersion\": 1,\n  \"contract\": \"kungfu-buildchain-artifact\",\n  \"artifactName\": \"libnode-linux-x64-<sha>\",\n  \"platform\": {\n    \"id\": \"linux-x64\",\n    \"name\": \"Linux x64\",\n    \"os\": \"Linux\",\n    \"arch\": \"X64\"\n  },\n  \"git\": {\n    \"repository\": \"kungfu-systems/libnode\",\n    \"sha\": \"<sha>\",\n    \"ref\": \"<ref>\",\n    \"runId\": \"<run id>\",\n    \"runAttempt\": \"<attempt>\"\n  },\n  \"lifecycle\": {\n    \"stage\": \"verify\",\n    \"commandSource\": \"buildchain.toml\",\n    \"executed\": true\n  },\n  \"summary\": {\n    \"contract\": \"kungfu-buildchain-artifact-summary\",\n    \"artifactName\": \"libnode-linux-x64-<sha>\",\n    \"fileCount\": 1,\n    \"totalBytes\": 1234,\n    \"digest\": \"<hex>\"\n  },\n  \"expectedArtifacts\": {\n    \"ok\": true,\n    \"source\": \"expected-artifacts-json\",\n    \"checks\": []\n  },\n  \"files\": [\n    {\n      \"path\": \"dist/example.zip\",\n      \"size\": 1234,\n      \"sha256\": \"<hex>\"\n    }\n  ]\n}\n```\n\nArtifact names do not include actor names, timestamps, or retry counters. Reruns\nproduce a new GitHub Actions run but keep the same source SHA/platform contract.\n\n`expected-artifacts-json` fails the build before upload when the artifact does\nnot match the caller's declared contract. Supported checks are:\n\n| Field           | Meaning                              |\n| --------------- | ------------------------------------ |\n| `minFiles`      | Minimum number of manifest files     |\n| `maxFiles`      | Maximum number of manifest files     |\n| `minTotalBytes` | Minimum total byte count             |\n| `requiredPaths` | Exact manifest paths that must exist |\n\n## Trusted Event Gate\n\nThe workflow has an explicit `trust-gate` job. By default, pull requests from\nforks fail before any build job can reach self-hosted runners, secrets,\npublishing credentials, or heavyweight build commands. Same-repository PRs,\nworkflow dispatches, and protected branch events can proceed.\n\nIf a repository wants fork PRs to skip rather than fail, it can set:\n\n```yaml\nwith:\n  untrusted-policy: skip\n```\n\nDo not set `require-trusted-event: false` for workflows that use self-hosted\nrunners or secrets.\n\nThe build matrix and the workflow control plane are routed independently. The\nmatrix continues to use `runner-preset` and `platforms-json`. Consumers with a\ngoverned runner may also move channel resolution, trust evaluation, contract\nresolution, controller evidence, artifact transfer, and aggregation off the\ndefault GitHub-hosted runner:\n\n```yaml\nwith:\n  control-runner-json: '[\"self-hosted\",\"agent-120\"]'\n  runner-preset: custom\n  platforms-json: '[{\"id\":\"linux-x64\",\"name\":\"Linux x64\",\"runner\":\"[\\\"self-hosted\\\",\\\"agent-120\\\"]\"}]'\n```\n\n`control-runner-json` is additive and defaults to `[\"ubuntu-24.04\"]`. Keep\n`require-trusted-event: true` whenever either runner input selects\n`self-hosted`; a self-hosted control plane must not be exposed to untrusted fork\nevents or arbitrary caller-controlled workflow code.\n\n`require-trusted-event` controls access to build runners. It does not override\nthe publish gate: pull requests remain non-publishing events.\n\n## Fixture\n\n`fixtures/libnode-shaped` is the contract fixture. It has:\n\n- `package.json` version state;\n- `.buildchain/buildchain.toml` with `install`, `build`, `verify`, and `publish`;\n- cross-platform Node scripts that create small `dist/` outputs;\n- `Build Surface Fixture` workflow coverage.\n\nThe fixture proves the reusable surface without running the real libnode native\nbuild."
+      "markdown": "---\nstatus: draft\nperiod: ongoing\ntheme: buildchain-reusable-build\ndoc_type: technical-reference\nsource_level: local-files\nconfidence: high\nsensitivity: public\nevidence_grade: A\nreview_state: unreviewed\nlast_reviewed: 2026-08-03\nai_provenance:\n  model_family: GPT-5\n  product: Codex\n  generated_at: 2026-08-03\n  invisible_context: not asserted\n---\n\n# Reusable Build Surface\n\nBuildchain v3 provides a reusable build workflow for repositories that need\nBuildchain's release semantics but cannot be described as a simple Node package.\nThe first target shape is `libnode`: expensive native builds, multiple operating\nsystems, self-hosted runner labels, and release artifacts that must be auditable.\n\nFor Linux release artifacts, the build workflow can hand the sealed artifact,\nplatform manifest, and Release Passport to the separate GitHub-hosted keyless\nattester. The compiler runner remains the recorded build identity; the attester\nonly signs and verifies immutable data. See\n[`github-artifact-attestation.md`](github-artifact-attestation.md).\n\n## Automatic Channel Router\n\nThe preferred consumer surface is one reusable workflow call. Consumers keep\nthis configuration for both alpha development and stable release work:\n\n```yaml\njobs:\n  build:\n    uses: kungfu-systems/buildchain/.github/workflows/build.yml@v3\n    permissions:\n      contents: read\n      issues: write\n      id-token: write\n    with:\n      working-directory: .\n      artifact-name: libnode\n      runner-preset: kungfu-v4-self-hosted\n      publish-channel: none\n    secrets: inherit\n```\n\n`buildchain-channel` defaults to `auto`. Selection uses this precedence:\n\n1. an explicit `buildchain-ref` protected authority, train, SHA, or official channel;\n2. an explicit `buildchain-channel: alpha|stable`;\n3. `publish-channel: alpha|release|major`;\n4. GitHub release prerelease metadata;\n5. a canonical semver tag;\n6. non-release PR, push, dispatch, schedule, and workflow-run events default to\n   alpha.\n\nThe resolved runtime is `vN-alpha` for development and prerelease intent and\n`vN` for stable release intent. Unknown custom publish channels, malformed\nrelease events, and non-semver release-like tags fail before the build matrix;\nthey never guess alpha for a stable release.\n\nThe router automatically selects `.buildchain/alpha-contract-lock.json` for\nalpha and `.buildchain/contract-lock.json` for stable. A repository can override\nthe common path with `buildchain-contract-lock-path`, or override one channel\nwith `buildchain-alpha-contract-lock-path` /\n`buildchain-stable-contract-lock-path`.\n\nOnly repositories changing the default policy need extra routing input:\n\n```yaml\nwith:\n  buildchain-channel: stable\n```\n\nDuring v3 prerelease evaluation windows, canaries use `build.yml@v3-alpha`.\nThe same router then selects `v3-alpha` or stable `v3` as the runtime.\nProduction consumers use `build.yml@v3`; this keeps the routing shell itself on\na stable ref.\n\nThe router is generated from `.build.yml`'s input/output surface. Run\n`node scripts/generate-channel-build-workflow.mjs` after changing the advanced\nbuild workflow; inventory and unit tests reject a stale generated router.\n\n## Advanced Workflow\n\nConsumers that need direct workflow-shell or runtime control call the advanced\nsurface:\n\n```yaml\njobs:\n  build:\n    uses: kungfu-systems/buildchain/.github/workflows/.build.yml@v3\n    with:\n      working-directory: .\n      artifact-name: libnode\n      runner-preset: kungfu-v4-self-hosted\n      linux-container-preset: kungfu-verify\n      artifact-name-template: \"{artifact}-{platform}-{sha}\"\n      artifact-paths: |\n        dist\n        build/stage\n      pre-upload-transport-smoke-scenario-path: .buildchain/auditable-demo.json\n      pre-upload-transport-smoke-artifact-root: .\n      expected-artifacts-json: >-\n        {\"minFiles\":2,\"requiredPaths\":[\"dist/libnode.tar.gz\",\"dist/checksums.txt\"]}\n      process-summary-path: .buildchain/diagnostics/process-summary.json\n      release-candidate: true\n      publish-channel: release\n      publish-source-ref: publish-gate/release/v22/v22.22/22.22.3-kf.0\n```\n\nFor a standalone Linux binary demo, the optional pre-upload transport smoke\nuses the same declarative scenario as the later capture workflow. Buildchain\ncopies the distribution containing the scenario metadata, strips file execute\nbits to model GitHub Artifact transport, restores only the declared\ndigest-bound executable closure, and runs `transportSmoke` before either the\nGitHub Artifact or S3 relay upload step. The smoke must be non-interactive and\nis hard-capped at 60 seconds. Omitting the input preserves the ordinary build\nsurface; enabling it requires a scenario with `transportSmoke`.\n\n`runner-preset` is the stable first-class surface for known runner fleets:\n\n| Preset                  | Platforms                                                                                                      |\n| ----------------------- | -------------------------------------------------------------------------------------------------------------- |\n| `github-hosted`         | `ubuntu-24.04`, `macos-latest`, `windows-2022`                                                                 |\n| `kungfu-v4-self-hosted` | Kungfu Linux x64, macOS ARM64, and Windows x64 self-hosted runner labels                                       |\n| `kungfu-v4-native`      | Kungfu Linux x64, Linux ARM64, macOS ARM64, and Windows x64; Linux ARM64 uses GitHub-hosted `ubuntu-24.04-arm` |\n| `custom`                | Requires `platforms-json`                                                                                      |\n\nSet `self-hosted-offline-fallback: true` to inspect every exact-label\nself-hosted lane from the trusted Buildchain workflow shell before the matrix\nstarts. A lane with no matching online runner is replaced independently by its\nsupported GitHub-hosted runner: Kungfu Linux x64 uses `ubuntu-24.04`, macOS ARM64\nuses `macos-15`, and Windows x64 uses `windows-2022`. Online-but-busy runners\nremain online and keep their declared self-hosted route. Organization-owned\nrepositories inspect organization runner inventory so selected-repository runner\ngroups are not mistaken for an empty repository runner inventory. If the\ninventory token, permission, or API is unavailable, Buildchain preserves the\noriginal matrix instead of guessing that the fleet is offline. The public\nworkflow output `runner-routing-json` records only de-identified counts,\ninventory scope, and routing decisions.\n\n```yaml\nwith:\n  runner-preset: kungfu-v4-native\n  self-hosted-offline-fallback: true\nsecrets:\n  BUILDCHAIN_PROMOTION_TOKEN: ${{ secrets.KUNGFU_GITHUB_TOKEN }}\n```\n\nCallers can still provide a custom matrix with `platforms-json`. Each platform\nobject has:\n\n| Field    | Meaning                                           |\n| -------- | ------------------------------------------------- |\n| `id`     | Stable artifact/platform key, such as `linux-x64` |\n| `name`   | Human-readable job name                           |\n| `runner` | JSON string passed to `runs-on` after `fromJSON`  |\n\nThe runner field is intentionally a JSON string so callers can pass either\nGitHub-hosted runners or multi-label self-hosted runners without Buildchain\nguessing the labels.\n\nOnly include platforms that should run. GitHub schedules matrix jobs before\nsteps execute, so a disabled entry with unavailable runner labels can still\nblock the workflow queue.\n\n`fail-fast` defaults to `false`, preserving the diagnostic behavior that\ncollects every platform result. Required promotion callers can set it to `true`\nto cancel sibling native, container, and relay matrix lanes after the first\nfailure. This input changes scheduling only: it does not reduce the declared\nplatform matrix, turn cancellation into a pass, or alter artifact and release\nadmission.\n\n## Linux Job Containers\n\nLinux build platforms can run inside a digest-pinned job container while macOS\nand Windows keep using native runners. This is the recommended way to remove\nmoving Linux runner prerequisites from Buildchain consumers: the Linux host only\nneeds a GitHub Actions runner, Docker, and network access; common verification\ntools come from the image contract.\n\nUse the Kungfu verification image for lifecycle stages that need Git, jq,\nPython, uv, and fnm, but do not need native compilation:\n\n```yaml\njobs:\n  build:\n    uses: kungfu-systems/buildchain/.github/workflows/.build.yml@v3\n    with:\n      runner-preset: kungfu-v4-self-hosted\n      linux-container-preset: kungfu-verify\n```\n\n`kungfu-verify` resolves to:\n\n```text\nghcr.io/kungfu-systems/build-images/kungfu-verify@sha256:11f0ba64267ce88174a4f73a9bf833ff4e9c59cd16ec3d08a6432a06c2be6fb1\n```\n\nCallers that own a different Linux image can pass it explicitly:\n\n```yaml\nwith:\n  linux-container-preset: custom\n  linux-container-image: ghcr.io/example/project-build@sha256:<digest>\n```\n\n`linux-container-image` should be pinned by digest. A floating tag makes the\nrunner surface mutable and weakens Buildchain's release evidence.\n\nThe workflow splits the matrix into two build jobs:\n\n- Linux platforms go to `build-linux-container` when a Linux container is\n  configured.\n- All other platforms go to `build-native`.\n\nArtifact names, manifest paths, expected artifact checks, publish-source locks,\nand aggregate summaries are the same in both jobs. The split is an execution\ndetail, not a different artifact contract.\n\n## Native Rust Toolchains\n\nNative lifecycle jobs can request an isolated Rust installation instead of\ndepending on a self-hosted runner user's PATH:\n\n```yaml\nwith:\n  setup-rust: true\n  rust-toolchain: \"1.96.0\"\n  rustup-dist-server: \"https://rsproxy.cn\"\n  rustup-update-root: \"https://rsproxy.cn/rustup\"\n  cargo-registry-index: ${{ vars.BUILDCHAIN_CARGO_REGISTRY_INDEX }}\n```\n\n`setup-rust` defaults to `false`, so existing consumers are unchanged. When it\nis enabled, Buildchain installs `rust-toolchain` before the install, build, and\nverify lifecycle stages on every native matrix platform. Windows uses the\nofficial rustup bootstrap through `cmd.exe` and `curl.exe` into runner-temporary\nCargo and rustup homes, so it works under a restrictive PowerShell execution\npolicy and the service account does not depend on another user's PATH or mutate\nhost toolchain state. Pin an exact toolchain for release builds. Linux container jobs continue\nto obtain Rust from their digest-pinned image contract; Buildchain does not\nmutate that container surface.\n\nThe rustup server inputs are optional and default to Rust's official servers.\nConsumers behind a slow cross-border link may select a trusted transport mirror;\nrustup still verifies the selected toolchain's distribution metadata and\ncomponent checksums.\n\n`cargo-registry-index` is also optional. When set, Buildchain exposes it to\nCargo as `CARGO_REGISTRIES_CRATES_IO_INDEX` for every native lifecycle stage,\nso a self-hosted runner can use a repository or organization variable without\ncommitting private LAN topology to public workflow YAML. The endpoint must be a\ncrates.io-compatible index whose `config.json` download contract serves the\nmatching checksum-verified crate archives. An empty value preserves Cargo's\nnormal crates.io behavior.\n\nThe container image provides `fnm` but does not preinstall Node. Buildchain uses\n`fnm` inside the container to install the requested `node-version` before it\nruns Buildchain runtime scripts or lifecycle actions.\n\nDo not use `kungfu-verify` for stages that need CMake, Ninja, ccache, Conan, or\nDocker image publishing. Those should use a heavier native-build image or remain\non a host runner until their image contract is explicit.\n\n## Buildchain Runtime Override\n\nStable consumers should keep the reusable workflow pinned to stable refs such as\n`@v3`. The optional `buildchain-ref` input is empty by default; empty means\nBuildchain resolves and executes the stable runtime selected by the workflow\nshell. The full train validation protocol is documented in\n[`runtime-train-validation.md`](runtime-train-validation.md).\n\nFor one-off manual validation, a trusted maintainer can run the caller workflow\nwith a temporary runtime override:\n\n```yaml\non:\n  workflow_dispatch:\n    inputs:\n      buildchain-ref:\n        description: \"Temporary Buildchain runtime ref for trusted manual validation\"\n        required: false\n        default: \"\"\n\njobs:\n  build:\n    uses: kungfu-systems/buildchain/.github/workflows/.build.yml@v3\n    with:\n      buildchain-ref: ${{ inputs.buildchain-ref || '' }}\n```\n\nAllowed override refs are deliberately narrow:\n\n| Ref form                                | Meaning                                                |\n| --------------------------------------- | ------------------------------------------------------ |\n| `train/v3/v3.0/<capability>`            | Temporary capability train under the active minor line |\n| `refs/heads/train/v3/v3.0/<capability>` | Explicit branch ref for the same train                 |\n| `<40-character SHA>`                    | Exact immutable Buildchain runtime commit              |\n\nOverride requests fail closed unless the event is `workflow_dispatch` and the\nactor has write, maintain, or admin permission on the caller repository. One\nnon-override exact-pin case is also admitted: when the reusable workflow itself\nis invoked from an exact Buildchain SHA and `buildchain-ref` names that identical\nSHA, the run records `pinned-self`. The input cannot select code other than the\nalready-running workflow shell, so protected push and pull-request publication\njobs can retain one immutable runtime root. Different SHA and train requests\nstill fail closed outside trusted manual dispatch.\n\nPull requests, including same-repository pull requests and fork-originated pull\nrequests, cannot select an independent `buildchain-ref` override. This keeps\nautomated PR builds on the stable or exact pinned-self runtime surface.\n\nEvery run resolves the runtime ref to an immutable SHA before checkout. The job\nsummary and aggregate build summary record the workflow shell ref, requested\nruntime ref, resolved runtime ref, runtime SHA, stability class, trust decision,\nand rollback ref. Train refs are development validation refs: they do not move\n`v3`, `vX.Y`, `vX.Y-alpha`, npm dist-tags, or production release refs, and they\nmust not be pinned as long-term production dependencies.\n\nRuntime override validates Buildchain runtime scripts, CLI code, local actions,\nconfig parsing, and lifecycle behavior. It cannot validate changes that require\nthe outer reusable workflow YAML itself to change, such as new jobs,\npermissions, workflow outputs, or matrix topology. Those changes need a canary\nworkflow path or a temporary explicit workflow ref.\n\n## Floating Ref Contract Lock\n\nStable consumers should use floating major refs such as `@v3`, but a floating\nref is not blind trust. Each released Buildchain ref carries a package-owned\nruntime contract world in `dist/site/buildchain-contract.json`. Consumers may\nkeep a small lock file, `.buildchain/contract-lock.json`, recording the\nBuildchain ref, resolved SHA, contract digest, compatibility digest, accepted\nmajor line, and compatibility policy they reviewed.\n\nThe reusable build trust gate checks this lock before any heavy matrix job:\n\n1. resolve the Buildchain runtime ref, for example `v3`, to an immutable SHA;\n2. read `dist/site/buildchain-contract.json` from that checked-out Buildchain\n   ref;\n3. read the consumer's `.buildchain/contract-lock.json`;\n4. compare the accepted contract with the current contract.\n\nSHA drift alone is not a failure. `v3` is expected to advance. Buildchain only\nfails fast when the accepted contract is no longer compatible, for example a\nrequired input is removed, a required output disappears, a protected behavior\npromise changes, or the major line changes. Additive changes such as optional\ninputs, optional outputs, diagnostics, or documentation updates continue under\nthe default `major-compatible` policy.\n\n```yaml\njobs:\n  build:\n    uses: kungfu-systems/buildchain/.github/workflows/.build.yml@v3\n    permissions:\n      contents: read\n      issues: write\n      id-token: write\n    with:\n      buildchain-contract-lock-path: .buildchain/contract-lock.json\n      buildchain-contract-compatibility-policy: major-compatible\n      buildchain-contract-drift-issue-mode: compatible-and-breaking\n```\n\nWhen compatible drift is detected, the build continues and Buildchain opens or\nupdates a low-priority issue in the consumer repository. The issue records the\nold SHA/digest, new SHA/digest, compatibility result, workflow run, and the next\naction: review the Buildchain release notes and update the lock. When breaking\ndrift is detected, the same issue path is used, but the trust gate fails before\nmatrix build or publish work starts. If the workflow token cannot write issues,\nBuildchain writes a copyable issue body into the job summary.\n\nThe lock is intentionally small. It does not copy the full contract. The full\ncontract remains in the Buildchain ref and package; the consumer records only\nwhat it accepted and the policy used to compare future floating-ref movement.\n\nAdvanced alpha-channel consumers select the matching workflow shell:\n\n```yaml\njobs:\n  build:\n    uses: kungfu-systems/buildchain/.github/workflows/.build.yml@v3-alpha\n    with:\n      buildchain-contract-lock-path: .buildchain/contract-lock.json\n```\n\nThe runtime follows the called workflow through `job.workflow_ref`. Callers may\nalso pass `buildchain-ref: v3-alpha` explicitly; official floating refs are\nordinary channel selections and are allowed on pull requests and pushes. Train\nrefs and exact SHAs remain trusted manual overrides.\n\n## Shifu Cache Profile Passthrough\n\nBuildchain can carry one trusted Shifu cache-profile reference and its exact\ndigest into lifecycle execution. Its contract is an opaque reference and digest\nonly. This surface is deliberately opaque:\nBuildchain does not fetch the profile, parse JSON, select cache services,\nrewrite bindings, decide fallback, or emit Shifu resolution evidence. Those\nsemantics remain owned by the consumer's pinned Shifu implementation.\n\n```yaml\njobs:\n  build:\n    uses: kungfu-systems/buildchain/.github/workflows/build.yml@v3\n    with:\n      shifu-cache-profile-ref: ${{ vars.SHIFU_CACHE_PROFILE_REF }}\n      shifu-cache-profile-digest: ${{ vars.SHIFU_CACHE_PROFILE_DIGEST }}\n```\n\nThe reusable workflow passes the pair as `SHIFU_CACHE_PROFILE_REF` and\n`SHIFU_CACHE_PROFILE_DIGEST` to install, build, and verify lifecycle commands.\nThe consumer must invoke its Shifu cache-aware execution surface. An empty pair\npreserves existing behavior; a consumer Shifu should fail closed when exactly\none value is present or the resolved bytes do not match the expected digest.\n\nUse trusted repository or organization variables rather than PR-controlled\nfiles for private/LAN references. The variables must remain secret-free; any\ncredentials use a separate provider-approved secret surface and must not be\nembedded in the profile reference. This passthrough is separate from\nBuildchain's locked source checkout cache below: Buildchain owns checkout\ntransport and source identity, while Shifu owns post-checkout execution cache\nbindings and receipts.\n\n## Locked Source Checkout Cache\n\nSelf-hosted runners that build large repositories can opt into a locked checkout\ncache for both the consumer source and the Buildchain runtime. This changes only\nthe Git object transport. Buildchain still resolves `publish-source-sha` and the\nruntime SHA before any build runner starts, checks out those exact commits, and\nverifies each final `HEAD` plus the resolved consumer source tree SHA before\nlifecycle commands run.\n\n```yaml\njobs:\n  build:\n    uses: kungfu-systems/buildchain/.github/workflows/.build.yml@v3\n    with:\n      runner-preset: kungfu-v4-self-hosted\n      checkout-cache-mode: auto\n      checkout-cache-mirror-url-template: ${{ vars.BUILDCHAIN_CHECKOUT_CACHE_MIRROR_URL_TEMPLATE }}\n      checkout-cache-reference-repository-template: ${{ vars.BUILDCHAIN_CHECKOUT_CACHE_REFERENCE_REPOSITORY_TEMPLATE }}\n      checkout-cache-fallback: github\n      checkout-cache-timeout-seconds: 60\n      checkout-cache-github-timeout-seconds: 600\n      checkout-cache-fetch-attempts: 3\n      checkout-history-mode: shallow\n```\n\n`checkout-cache-mode` accepts:\n\n| Mode      | Behavior                                                                                                    |\n| --------- | ----------------------------------------------------------------------------------------------------------- |\n| `off`     | Default. Buildchain fetches the locked commit from GitHub.                                                  |\n| `auto`    | Try the trusted cache first; on miss, record the miss and fall back according to `checkout-cache-fallback`. |\n| `require` | Require the cache to provide the locked commit and fail before lifecycle work if unavailable.               |\n\n`checkout-history-mode` defaults to `shallow`, preserving the bounded single-\ncommit transport used by ordinary builds. Set it to `full` only when a\nconsumer gate must inspect source ancestry, for example when an Alpha pull\nrequest qualifies GitHub's synthetic merge ref while retained evidence is\nbound to an ancestor of the source-lock head. Full mode still verifies the\nresolved immutable `HEAD` and tree; it changes only whether the advertised\nsource ref is fetched with depth one or with its reachable history.\n\nThe cache can be a local/LAN mirror URL template or a runner-local bare\nreference repository template. Templates support `{owner}`, `{repo}`,\n`{repository}`, `{repositorySlug}`, and `{sha}`. The workflow also reads\nrepository or organization variables named\n`BUILDCHAIN_CHECKOUT_CACHE_MIRROR_URL_TEMPLATE` and\n`BUILDCHAIN_CHECKOUT_CACHE_REFERENCE_REPOSITORY_TEMPLATE`, so consumers can keep\nprivate LAN topology out of repository YAML.\n\nThe GitHub-hosted trust gate resolves the reusable workflow shell to an exact\ncommit and uploads that shell's small checkout bootstrap script. Native and\nLinux-container build jobs download the bootstrap, then use the same cache\npolicy to obtain both the selected Buildchain runtime and consumer source at\ntheir already resolved immutable SHAs. Keeping the bootstrap owned by the\nworkflow shell is important when `@vN-alpha` routes a stable release to an older\n`vN` runtime: the stable runtime does not need to already contain the newest\ncheckout transport implementation. This also prevents a large direct\n`actions/checkout` runtime clone from becoming a separate timeout path on\nconstrained self-hosted uplinks. The bootstrap artifact does not contain the\nruntime repository and cannot move either selected ref.\n\nDo not read cache URLs or reference paths from PR-controlled files such as\n`.buildchain/buildchain.toml`. These values are trusted workflow inputs or repo/org\nvariables. Buildchain does not pass GitHub credentials to cache mirrors or\nreference repositories. If it must fall back to GitHub, the workflow token is\nused only for the GitHub fetch path. Cache attempts use\n`checkout-cache-timeout-seconds`; the potentially larger GitHub fallback uses\nthe independent `checkout-cache-github-timeout-seconds` budget (600 seconds by\ndefault). Buildchain fetches the advertised source ref before trying an exact\nSHA, so a cache hit or stale-cache seed can contribute objects and the fallback\ndoes not first waste a full timeout on an unadvertised SHA. Retryable timeout\nand transient network failures use the bounded `checkout-cache-fetch-attempts`\nbudget; permanent failures stop immediately. Diagnostics record both timeout\nbudgets and the actual GitHub fetch attempts before exact HEAD/tree\nverification.\n\nEach platform diagnostics artifact includes `source-checkout.json` and embeds a\ncompact `sourceCheckout` summary in `diagnostics.json`: mode, transport,\nhit/miss, fallback reason, duration, final HEAD verification, and tree\nverification. Remote URLs are sanitized and local reference paths are represented\nby a short display name plus fingerprint, not by secret-bearing credentials.\nRuntime checkout evidence is uploaded separately as `runtime-checkout.json`,\nincluding cache transport, fallback attempts, and exact runtime `HEAD`\nverification, even when a later lifecycle step fails.\n\n## Auditable Compiler Cache\n\nConsumers can prepare `sccache` on selected platforms after the install\nlifecycle and before compilation:\n\n```yaml\nwith:\n  compiler-cache-provider: sccache\n  compiler-cache-platforms-json: '[\"windows-x64\"]'\n  compiler-cache-required: true\n```\n\nThe consumer remains responsible for installing and pinning the tool before\nthe preparation step. Buildchain probes its version, runs `sccache\n--zero-stats`, and writes\n`compiler-cache-preparation.json`. The receipt binds the source commit/tree,\nBuildchain runtime, platform, cache profile, and any declared dependency,\ntoolchain, or policy roots. It resets counters only; it does not delete cached\ncompiler outputs. The same preparation exports `RUSTC_WRAPPER`,\n`CMAKE_C_COMPILER_LAUNCHER`, and `CMAKE_CXX_COMPILER_LAUNCHER` so Cargo and\nCMake/Ninja compilation actually passes through the audited tool.\n\nAfter the build lifecycle, Buildchain probes the reset counter set again. When\n`compiler-cache-required` is true, the build fails closed if sccache observed\nzero compiler requests or zero cacheable requests. This prevents an installed\nbut unbound sccache binary from being reported as an active compiler cache.\n\nFinal diagnostics admit sccache hit/miss outcomes as current-run evidence only\nwhen that preparation receipt is present and valid. A bare `sccache\n--show-stats` result without the reset receipt remains cumulative and is\nreported as unavailable for the current run. The preparation receipt is copied\ninto the small diagnostics artifact and sealed by\n`diagnostics-manifest.json`.\n\nWhen a Buildchain maintainer asks for downstream validation, the expected\nrequest is:\n\n```text\nBuildchain train ready: buildchain-ref=train/v3/v3.0/<capability>.\nKeep uses: ...@v3; run workflow_dispatch with that buildchain-ref and report the runtime evidence summary.\n```\n\nAfter validation succeeds, the Buildchain change should continue through the\nnormal mainline and release path. Do not treat the train as a pending merge\nitem; it is only a temporary fast-use, diagnostic, and rollback channel. It may\nremain for a retention window after release, with old trains handled by a\nseparate periodic cleanup task.\n\n## Workflow Outputs\n\nThe reusable workflow exposes the resolved contract:\n\n| Output                                | Meaning                                                                                                                                      |\n| ------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------- |\n| `runner-preset`                       | Resolved preset, or `custom` when `platforms-json` was provided                                                                              |\n| `platforms-json`                      | Exact matrix JSON used by the build job                                                                                                      |\n| `platform-count`                      | Number of matrix platforms                                                                                                                   |\n| `linux-container-enabled`             | `true` when Linux platforms are routed through a job container                                                                               |\n| `linux-container-image`               | Resolved digest-pinned Linux job container image                                                                                             |\n| `build-summary-artifact`              | Uploaded aggregate summary artifact name                                                                                                     |\n| `build-diagnostics-summary-artifact`  | Uploaded aggregate diagnostics summary artifact name                                                                                         |\n| `release-candidate-passport-artifact` | Uploaded PR-stage release-candidate passport artifact name when `release-candidate` is enabled                                               |\n| `release-candidate-passport-json`     | Compact release-candidate passport JSON when `release-candidate` is enabled                                                                  |\n| `build-summary-json`                  | Compact aggregate JSON with platform count, file count, and byte total                                                                       |\n| `build-diagnostics-summary-json`      | Compact aggregate diagnostics JSON with platform, lifecycle warning/error, diagnostics contract warning, and sidecar manifest warning totals |\n| `trusted-event`                       | `true` when the event is trusted enough to reach build runners                                                                               |\n| `buildchain-runtime-ref`              | Runtime ref selected after applying the empty-default or override policy                                                                     |\n| `buildchain-runtime-sha`              | Immutable Buildchain runtime commit used by all runtime checkouts                                                                            |\n| `buildchain-runtime-class`            | `stable`, `alpha`, `authority`, `train`, `exact-sha`, or `development`                                                                       |\n| `buildchain-runtime-override`         | `true` when an authority, train, or exact-SHA `buildchain-ref` override was accepted                                                         |\n| `buildchain-runtime-trust-decision`   | Runtime override trust decision                                                                                                              |\n| `buildchain-contract-lock-status`     | `unchanged`, `compatible-drift`, `breaking-drift`, `missing-lock`, `non-floating-runtime`, or first-release `runtime-contract-unavailable`   |\n| `buildchain-contract-lock-drift`      | `true` when the floating runtime SHA or contract digest changed                                                                              |\n| `buildchain-contract-digest`          | Current Buildchain runtime contract digest                                                                                                   |\n| `publish-channel`                     | Resolved publish channel requested by the caller                                                                                             |\n| `publish-allowed`                     | `true` only when this event/ref may publish after verification                                                                               |\n| `publish-reason`                      | Human-readable reason for the publish gate decision                                                                                          |\n| `publish-source-ref`                  | Gate source ref that was resolved before checkout                                                                                            |\n| `publish-source-sha`                  | Exact source commit used by checkout, build, verify, and artifacts                                                                           |\n| `publish-source-locked`               | `true` when a `publish-gate/*` source ref was explicitly locked                                                                              |\n| `publish-source-channel`              | `alpha`, `release`, `anchor`, or `major` parsed from the source ref                                                                          |\n| `publish-source-line`                 | Product line parsed from source refs such as `v22/v22.22`                                                                                    |\n| `publish-source-consumer-version`     | Consumer package version parsed from source refs                                                                                             |\n| `release-manifest-json`               | Resolved release manifest including source lock, version state, and anchor data                                                              |\n\nThe aggregate summaries are intentionally artifacts as well as outputs. GitHub\nActions matrix outputs are not a reliable place to carry every platform's full\nmanifest, so Buildchain uploads each platform manifest and then emits one\naggregate build summary artifact after the matrix completes. Buildchain uploads\n`diagnostics-summary.json` as a separate aggregate diagnostics summary artifact,\na compact rollup of each platform's small diagnostics upload. The rollup keeps\nper-platform runner facts, checked tool versions/missing tools, package\nmanager/cache directory details, compiler-cache availability, lifecycle timing,\nprocess sampler context, and links back to the exact platform artifacts. Each\nplatform diagnostics upload includes `diagnostics.json`,\n`diagnostics-manifest.json`, the lifecycle `events.jsonl`, and process sampler\nsidecars when enabled, so slow-build diagnosis does not require downloading the\nbinary platform artifact or the aggregate build summary. The sidecar manifest\nrecords the uploaded diagnostics files with bytes and sha256 hashes. Each\n`diagnostics.json` also records the related binary artifact name, manifest\nartifact name, diagnostics artifact name, diagnostics sidecar manifest path, and\nplatform id in `links`, so a reviewer can navigate from the small diagnostics\nartifact back to the exact platform outputs when deeper inspection is needed.\nThe workflow output `build-diagnostics-summary-json` includes\n`diagnosticsContractWarningCount` and `diagnosticsManifestWarningCount` so\nrelease jobs can detect drifting diagnostics JSON contracts and missing or\ndrifting diagnostics sidecar manifests without downloading the per-platform\ndiagnostics artifacts first.\n\n## Artifact Signing Authority\n\nArtifact signing is a Buildchain capability, not a macOS application workflow.\nConsumers declare desired signature state next to their artifact facts; they do\nnot configure certificates, Team IDs, notary credentials, protected\nenvironments, authority roles, or signing jobs:\n\n```toml\n[[signing.artifacts]]\nid = \"native-engine\"\npath = \"dist/kungfu-engine\"\nprofile = \"auto\"\nkind = \"mach-o\"\nplatforms = [\"macos-arm64\", \"macos-x64\"]\n```\n\nEvery native and container build lane reads this declaration after the build\nlifecycle and before verification. Buildchain binds the exact artifact bytes or directory tree to\nthe caller repository, source commit, source tree, immutable runtime, platform,\nand requested signature semantics, then publishes a deterministic\n`<artifact>-signing-request-<platform>-<source-sha>-<run-id>-<run-attempt>`\nrequest. No consumer\nworkflow step is required. The lifecycle runner automatically adds declarations\nselected for the current platform to the `build` manifest scan, including\nsubjects outside the caller's ordinary `artifact-paths`; this extends the\nevidence preimage without silently adding those subjects to the ordinary\nartifact upload.\n\nThe request root is a Buildchain-owned generated output. After the declaration,\nlifecycle manifest, and source paths pass validation, sealing replaces that root\nbefore materializing the current request set. This keeps repeated jobs on a\nself-hosted runner idempotent and prevents stale requests from an earlier run\nfrom entering the uploaded request artifact. An output root that contains the\nworkspace, working directory, lifecycle manifest, or any declared subject is\nrejected before cleanup.\n\nSelf-hosted runners whose network requires different routes for Artifact upload\nand download can scope an upload-only proxy bypass to the sealed signing request:\n\n```yaml\nwith:\n  artifact-signing-request-upload-no-proxy: \".blob.core.windows.net\"\n```\n\nThe caller repository variable\n`BUILDCHAIN_ARTIFACT_SIGNING_REQUEST_UPLOAD_NO_PROXY` provides the same value\nwithout changing a consumer workflow; an explicit workflow input takes\nprecedence. When neither is set, Buildchain preserves the runner's existing\n`NO_PROXY` and `no_proxy` values. The resolved value applies only to the\nBuildchain-owned signing-request upload. Authority dispatch and immutable\nsigned-result download keep the runner's original proxy route. This is a\ntransport control only: it does not change request bytes, signing authority,\nartifact identity, or verification policy.\n\n`profile = \"auto\"` resolves signable Apple artifacts such as Mach-O files,\n`.dylib`, `.framework`, `.app`, `.xpc`, `.plugin`, `.pkg`, `.dmg`, and macOS\narchives containing native code to the native `apple-developer-id` provider.\nFor a declared macOS `archive`, the authority safely extracts the sealed\ncontainer, signs and verifies every Mach-O payload, signs Mach-O payloads inside\nembedded Python wheels, rebuilds each affected wheel's PEP 427 `RECORD`, and\nrecreates the original zip or tar.gz before returning the exact final bytes.\nWindows `pe` and `binary` artifacts\nresolve to timestamped native `windows-authenticode`; Windows PE never falls\nback to a detached signature. Linux and other non-native binary files,\narchives, blobs, and directories resolve to `detached-signature-v1`. Buildchain records that as a\ndetached cryptographic signature and never misrepresents it as an operating\nsystem code signature. Explicit incompatible provider/kind/platform\ncombinations fail closed.\n\nThe request schema rejects credential and authority-infrastructure fields. The\nBuildchain-owned signing authority is responsible for credential selection,\nnative signing, notarization where applicable, immutable result delivery, and a\nreceipt bound to the request digest, runtime SHA, output digest, and signature\nevidence. Consumer repositories neither receive nor duplicate credential-island\nmaterial. Each platform lane seals and uploads the unsigned request plus a\nrun-attempt-bound control request, completes functional verification, and exits.\nIt does not dispatch or poll the authority. A separate `ubuntu-24.04` controller\nstarts only after the build matrices complete, validates the exact source,\ntree, runtime, request-set root, platform, run attempt, and correlation, then\ndispatches and awaits the protected authority workflow. Its retained receipt\nrecords two independent immutable identities: the consumer Buildchain runtime\nSHA carried by the control request and the exact authority-ref commit resolved\nimmediately before dispatch. The former validates the request-producing\nruntime; the latter must equal the authority workflow run's `head_sha` and is\nretained with the exact authority run and result artifact. If the protected ref\nmoves between resolution and dispatch, settlement fails closed. Failure, timeout, or\ncancellation produces a non-qualifying receipt and no finalization delegation.\n\nA second GitHub-hosted finalization lane downloads the original control request,\ncontroller receipt, and delegation, verifies their roots and coordinates agree,\nthen verifies the authority result against the sealed request, imports the exact\nsigned bytes, and recomputes the final manifest before replacing the\ndeterministic artifact. The signing result is never downloaded back to a\nself-hosted native runner, so a macOS caller is released before credential-island\nsigning and notarization complete.\nPlatform manifests, KFD evidence, checksums, and Release Passport inputs\ntherefore observe the final signed artifact rather than the pre-signing build\noutput.\n\nFor a standalone Mach-O request, the authority requires strict Developer ID\nverification, the declared Team ID, hardened runtime, and an `Accepted`\n`notarytool` result for the exact submission. Apple creates the notarization\nticket for that binary and publishes it online, but\n[standalone binaries do not support stapling](https://developer.apple.com/documentation/security/customizing-the-notarization-workflow).\nBuildchain therefore records\n`standalone-notary-ticket-online` and does not misapply app-bundle\n`spctl --assess --type execute` semantics to the raw executable.\n\nFor a compound archive request, the authority notarizes the complete extracted\nsigned product tree and records `compound-notary-ticket-online`. A generic\narchive container cannot carry a stapled ticket and is not itself a Gatekeeper\nexecution target; Gatekeeper evaluates the extracted signed code. Archive path\nand symlink validation fail closed before any payload is signed.\n\nFor a declared `app-bundle`, the same protected authority extracts the sealed\napplication, derives and verifies its bundle identity, signs nested native code,\nsubmits both the application and disk image for notarization, staples and\nGatekeeper-assesses both deliverables, and returns a ZIP, DMG, evidence document,\nand source-bound manifest. The reusable workflow verifies those returned bytes\non GitHub-hosted infrastructure, adds them to the normal macOS platform payload,\nand publishes a separate `<artifact>-macos-credential-<source-sha>` projection\nfor release pipelines that consume the credential-island evidence contract.\nConsumers declare the `.app` under `[[signing.artifacts]]`; they do not configure\nan environment, certificate, notary credential, or authority workflow.\n\nThe durable v3 authority runtime is\n`authority/v3/v3.0/artifact-signing`. It is channel-neutral: alpha and stable\nrelease work use the same protected `buildchain-artifact-signing` environment\nand provider identities. The authority ref is protected independently from\nrelease channels and can advance only through reviewed, checked changes; the\ntemporary `train/v3/v3.0/artifact-signing-authority` ref is retained only as a\nbounded migration rollback.\n\nThe older `credential-island-macos-*` reusable-workflow inputs remain a\ncompatibility surface while existing callers migrate. They are not the target\nconsumer contract and must not be used to design new integrations.\n\n## Artifact Transfer Relay\n\nBy default, platform jobs upload payloads, manifests, and diagnostics directly\nto GitHub artifacts:\n\n```yaml\nwith:\n  artifact-transfer-mode: github-artifacts\n  artifact-compression-level: 0\n```\n\nDirect GitHub Artifact payloads default to compression level `0`. Buildchain\nartifacts are commonly already-compressed archives; storing them without a\nsecond compression pass shortens the upload window while preserving the same\nartifact name, run/id/digest binding, retention, and no-overwrite behavior.\nCallers may select `1` through `9` for payloads that materially benefit from\ncompression. Manifests and diagnostics retain their existing small-artifact\nbehavior.\n\nLarge self-hosted native builds can opt into the first-class S3 relay path:\n\n```yaml\njobs:\n  build:\n    uses: kungfu-systems/buildchain/.github/workflows/.build.yml@v3\n    with:\n      runner-preset: kungfu-v4-self-hosted\n      artifact-transfer-mode: s3-to-github-artifacts\n      artifact-relay-s3-bucket: ${{ vars.BUILDCHAIN_ARTIFACT_RELAY_S3_BUCKET }}\n      artifact-relay-s3-region: ${{ vars.BUILDCHAIN_ARTIFACT_RELAY_S3_REGION }}\n      artifact-relay-s3-prefix: ${{ vars.BUILDCHAIN_ARTIFACT_RELAY_S3_PREFIX }}\n```\n\nIn relay mode, each self-hosted platform job uploads the heavy payload files to\nS3 and uploads only a small `relay-manifest.json` to GitHub. A GitHub-hosted\n`relay-artifacts` job then assumes the configured download role, downloads the\npayloads from S3, verifies every file by SHA256, and re-uploads the normal\nGitHub artifacts under the same artifact names that direct mode uses. Downstream\nsummary, release-candidate, and promote-only workflows therefore continue to\nconsume GitHub artifacts and do not need custom S3 logic.\nThe relay implementation uses Node.js plus the standard AWS environment\ncredentials from GitHub OIDC; runner images and build containers do not need the\nAWS CLI installed.\n\nAfter the GitHub artifact uploads succeed, Buildchain deletes the S3 objects\nlisted in the relay manifest for that platform. If any download, verification,\nor GitHub artifact upload fails, cleanup is skipped so maintainers can inspect\nthe retained S3 payload. Configure a short bucket lifecycle expiration as a\ncost and cleanup backstop.\n\nThe relay configuration is intentionally generic. Buildchain does not hard-code\norganization buckets, regions, or role ARNs. Callers may pass explicit inputs,\nor set repository/organization variables and secrets using these names:\n\n| Variable or secret                               | Meaning                                                 |\n| ------------------------------------------------ | ------------------------------------------------------- |\n| `BUILDCHAIN_ARTIFACT_RELAY_S3_BUCKET`            | Relay bucket name                                       |\n| `BUILDCHAIN_ARTIFACT_RELAY_S3_REGION`            | Relay bucket region                                     |\n| `BUILDCHAIN_ARTIFACT_RELAY_S3_PREFIX`            | Relay object prefix; defaults to `buildchain-artifacts` |\n| `BUILDCHAIN_ARTIFACT_RELAY_S3_ROLE_ARN`          | Shared OIDC role ARN for upload and download            |\n| `BUILDCHAIN_ARTIFACT_RELAY_S3_UPLOAD_ROLE_ARN`   | Upload OIDC role ARN for self-hosted build jobs         |\n| `BUILDCHAIN_ARTIFACT_RELAY_S3_DOWNLOAD_ROLE_ARN` | Download OIDC role ARN for the GitHub-hosted relay job  |\n| `BUILDCHAIN_ARTIFACT_RELAY_S3_OIDC_AUDIENCE`     | Optional OIDC audience override                         |\n\nFor AWS China regions, Buildchain defaults the OIDC audience to\n`sts.amazonaws.com.cn`; other regions default to `sts.amazonaws.com`. The caller\nworkflow must allow `id-token: write`, and the target role trust policy should\nrestrict GitHub OIDC claims to the expected organization, repository, workflow,\nand branch/ref. The S3 permissions should be scoped to the relay bucket/prefix\nused by the repository.\nUpload roles need write/delete access under the relay prefix; download roles\nneed read access plus delete access for successful cleanup.\n\nRelay mode is opt-in and does not affect forks or open-source users that do not\nconfigure S3. Missing bucket, region, upload role, or download role values fail\nbefore the heavy build matrix is scheduled. Buildchain treats S3 as a transport\ncache, not as the final release evidence store; the final audit entry remains\nthe GitHub artifact set plus the Buildchain build summary and release-candidate\npassport.\n\nSet `release-candidate: true` when the successful reusable build is meant to be\nthe artifact source promoted later. Buildchain then uploads\n`release-candidate-passport.json` under the\n`<artifact-name>-release-candidate-<publish-source-sha>` artifact name. Promotion\njobs can pass that passport to `promote-buildchain-ref` with\n`promote-only-release-candidate: \"true\"` so source, channel, platforms, and the\naggregate build-summary hash are checked before publish-gate side effects. The\npassport records the locked commit's Git tree SHA, so a post-merge channel HEAD\ncan be accepted only when it is tree-equivalent to the PR-stage build evidence.\n\n## Publish Gate\n\nBuildchain separates \"may build/verify\" from \"may publish.\" A same-repository\npull request may be trusted enough to run the build matrix, but it still must\nnot publish packages, S3 objects, release pages, or preview aliases. Publishing\nis allowed only when the caller explicitly requests a channel and the current\nevent/ref matches that channel.\n\nUse `publish-channel` to request a channel:\n\n```yaml\njobs:\n  build:\n    uses: kungfu-systems/buildchain/.github/workflows/.build.yml@v3\n    with:\n      publish-channel: release\n\n  publish:\n    needs: build\n    if: ${{ needs.build.outputs.publish-allowed == 'true' }}\n    runs-on: ubuntu-24.04\n    steps:\n      - run: ./scripts/publish.sh\n```\n\nDefault channels are:\n\n| Channel   | Allowed refs                                                                                         |\n| --------- | ---------------------------------------------------------------------------------------------------- |\n| `none`    | Never publishes; this is the default                                                                 |\n| `alpha`   | `alpha/vN/vN.M` branches or exact `vN.M.P-alpha.K` tags                                              |\n| `release` | `release/vN/vN.M` branches or release tags such as `vN.M.P`, `vN.M`, `vN`                            |\n| `major`   | `publish-gate/major`, legacy `major-gate`, or next-major release tags such as `vN.0.0`, `vN.0`, `vN` |\n\nPull request events always produce `publish-allowed=false`, even when the PR is\nfrom the same repository. Untrusted fork events also produce\n`publish-allowed=false`; with the default `untrusted-policy: fail`, the workflow\nthen fails before any build runner starts.\n\nProjects with their own channel names can pass `publish-refs-json`:\n\n```yaml\nwith:\n  publish-channel: nightly\n  publish-refs-json: >-\n    {\"nightly\":[\"^refs/heads/nightly/v\\\\d+$\"]}\n```\n\nThe aggregate build summary includes the same publish gate decision under\n`publishGate`, so a downloaded artifact summary explains both what was built and\nwhy it was or was not eligible to publish.\n\n## Publish Source Lock\n\n`publish-channel` answers \"may this event publish?\" Source lock answers \"which\nsource tree is the publish decision about?\" A caller can pass `publish-source-ref`\nto bind a publish run to a reviewed gate branch before any checkout happens:\n\n| Ref                                              | Meaning                                                                     |\n| ------------------------------------------------ | --------------------------------------------------------------------------- |\n| `publish-gate/alpha/<line>/<consumer-version>`   | Build and publish an alpha candidate for a consumer line                    |\n| `publish-gate/release/<line>/<consumer-version>` | Build and publish a production candidate for a consumer line                |\n| `publish-gate/anchor`                            | Resolve an explicit anchor request; it does not publish artifacts by itself |\n| `publish-gate/major`                             | Gate the next major source state                                            |\n| `major-gate`                                     | Legacy compatibility alias for the major gate                               |\n\nFor alpha and release refs, `<line>` is intentionally allowed to contain `/`, so\nKungfu-style lines such as `v22/v22.22` stay readable. The final path segment is\nthe consumer-visible version, for example `22.22.3-kf.0`.\n\nThe reusable workflow resolves the branch tip to `publish-source-sha`, checks out\nthat SHA in every build job, and uses the same SHA in artifact names, manifests,\nand aggregate summaries. Reruns therefore rebuild the same source tree even if a\ngate branch moves later.\n\nBefore any heavy build matrix is scheduled, the workflow also verifies that the\ntarget channel ref implied by the source lock already points at\n`publish-source-sha` and that the target channel HEAD came from the required\nmerged same-repository channel PR. `publish-gate/alpha/<line>/<version>` must\nmatch `alpha/<line>` and have PR lineage `dev/<line> -> alpha/<line>`;\n`publish-gate/release/<line>/<version>` must match `release/<line>` and have PR\nlineage `alpha/<line> -> release/<line>`. If either check fails, the run fails\nfast with a diagnostic telling maintainers to merge the source commit through\nthe channel PR first. This keeps verify from spending runner time on a source\ntree that cannot legally enter the requested publish channel.\n\nThe resolved release manifest is uploaded as an artifact and emitted as\n`release-manifest-json`. It records:\n\n- source ref, source SHA, channel, line, and consumer version;\n- configured version strategy and configured version-state files;\n- each version file's value, with release gates failing closed if the configured\n  files do not equal the consumer version;\n- anchor manifest summary for anchored/manual projects;\n- explicit anchor request JSON for `publish-gate/anchor`;\n- publish registry, dist-tag, and gate visibility metadata.\n\nPublish side-effect jobs should verify the lock immediately before publishing:\n\n```yaml\n- name: Verify publish gate did not move\n  run: node .buildchain/runtime/scripts/verify-publish-source-lock.mjs\n  env:\n    BUILDCHAIN_PUBLISH_SOURCE_REF: ${{ needs.build.outputs.publish-source-ref }}\n    BUILDCHAIN_PUBLISH_SOURCE_SHA: ${{ needs.build.outputs.publish-source-sha }}\n    BUILDCHAIN_SOURCE_REPOSITORY: ${{ github.repository }}\n    GITHUB_TOKEN: ${{ github.token }}\n```\n\nIf the branch tip no longer matches the manifest SHA, the publish job must fail\nclosed. Moving a gate branch creates a new publish decision and should produce a\nnew build run.\n\n## Release Candidate Promote-Only\n\nFor native package sets, the PR build is the only heavy build. When a PR targets\n`alpha/<line>` or `release/<line>`, `.build.yml` uploads a release-candidate\nbundle next to the platform artifacts. The bundle contains:\n\n- `release-candidate.passport.json`;\n- the aggregate `build-summary.json`;\n- copied platform manifest evidence for the built platforms.\n\nThe passport records two separate source identities:\n\n- `builtSourceSha` / `builtSourceTreeSha`: the PR-stage source that produced the\n  artifacts, usually the PR merge ref;\n- `promotionChannelSha` / `promotionChannelTreeSha`: the post-merge channel\n  commit used for publish authority.\n\nThe reusable promote wrapper resolves the merged PR, finds exactly one matching\nPR-stage release-candidate artifact, downloads it with the build summary and\npayload artifacts from the same PR-stage run, validates the payload count,\ncompares the built tree with the promotion channel tree, locks\n`publish-gate/{alpha,release,major}` to the promotion channel commit, and then\ncalls `actions/promote-buildchain-ref` with\n`promote-only-release-candidate: \"true\"` and\n`require-publish-source-lock: \"true\"`. The wrapper passes the created\n`publish-gate/*` ref, target SHA, and `locked=true` into the promote action, so\nfloating `@v3` consumers receive publish-side source-lock drift protection by\ndefault. It also defaults `branch-protection-bypass-apps` to `github-actions`\nso the workflow automation can apply generated version-state and channel\nbookkeeping on protected `dev`/`alpha`/`release` branches after the reviewed\nchannel PR has merged. Other App slugs and all user or team bypass actors are\nrejected. The wrapper uses the run-scoped `github.token` as the generated ref\nupdate token for protected bookkeeping PATCH calls, so the exact GitHub Actions\nApp authority can sync dev immediately after alpha/release publish without a\npost-publish PR.\nIt does not call `.build.yml`, does not create a matrix, and must fail before\npublish if the RC evidence, payload set, or source-lock ref is missing or\nambiguous.\n\nThe public `release-candidate-promote.yml` is a generated channel router. It\nderives the publication lane from `target-ref`, then selects the matching\nadvanced workflow shell, runtime, and consumer lock before the advanced\npromotion starts:\n\n- alpha targets use `.release-candidate-promote.yml@vN-alpha`, runtime\n  `vN-alpha`, and `buildchain-alpha-contract-lock-path`;\n- release and major targets use `.release-candidate-promote.yml@vN`, runtime\n  `vN`, and `buildchain-stable-contract-lock-path`.\n\nThe generated router also owns the stable-shell layout transition through\n`.buildchain/promotion-shell-routing.json`. The v3 stable and alpha lanes call\nthe hidden advanced workflow at the exact immutable SHA behind their selected\nv3 channel state and forward the complete internal promotion identity surface.\nThe logical shell identity remains `vN`, and the router retains it in the public\naudit outputs. The internal advanced-shell call receives the exact call ref\nselected by the routing configuration, so its called-workflow ref check and\ncheckout SHA both bind to the same immutable identity. Updating a routing pin\nafter a release does not require any consumer declaration change.\n\nThe router resolves immutable SHAs and the selected lock digest before candidate\ndownload. The advanced shell verifies the same router, shell, runtime, lock,\nchannel, and target binding again. Train and exact-SHA runtime overrides remain\nrestricted to trusted `workflow_dispatch` actors with write, maintain, or admin\npermission. Promotion controller evidence, the promotion copy of the release\ncandidate passport, and the final release passport record these identities.\n\n```yaml\njobs:\n  promote:\n    uses: kungfu-systems/buildchain/.github/workflows/release-candidate-promote.yml@v3\n    secrets:\n      buildchain-issue-app-id: ${{ secrets.BUILDCHAIN_ISSUE_APP_ID }}\n      buildchain-issue-app-private-key: ${{ secrets.BUILDCHAIN_ISSUE_APP_PRIVATE_KEY }}\n    with:\n      buildchain-channel: auto\n      buildchain-alpha-contract-lock-path: .buildchain/alpha-contract-lock.json\n      buildchain-stable-contract-lock-path: .buildchain/contract-lock.json\n      channel: alpha\n      target-ref: alpha/v22/v22.22\n      artifact-name: libnode\n      # Defaults to build.yml / Build. Override only when the PR-stage build\n      # workflow uses a different file or display name.\n      release-candidate-workflow-file: build.yml\n      release-candidate-workflow-name: Build\n      package-manager: npm\n      publish-target: npm\n      runner-preset: github-hosted\n      trusted-publishing: true\n      github-release: true\n      required-status-check: check / check\n      required-artifact-count: 3\n      publish-dist-tag: alpha\n      publish-package-set-order: platforms-first-main-last\n      publish-package-main: \"@kungfu-tech/libnode\"\n      release-passport-product-name: Libnode\n      buildchain-contract-drift-issue-mode: compatible-and-breaking\n```\n\nExisting callers may keep `buildchain-contract-lock-path`; a non-empty explicit\npath overrides channel-specific selection for compatibility. Migration only\nrequires adding the two channel lock inputs and may retain the remaining common\npromotion declaration unchanged. Consumers must not call the dot-prefixed\nadvanced workflow directly.\n\n`buildchain-issue-app-id` and `buildchain-issue-app-private-key` are optional\nbut recommended for cross-repository consumers. They should identify a GitHub\nApp installation with `issues: write` on `kungfu-systems/buildchain`; the\nwrapper mints the installation token before calling\n`actions/report-buildchain-issue`. Consumers can also pass a pre-minted\n`buildchain-issue-token`. If both are omitted, the wrapper falls back to\n`BUILDCHAIN_ISSUE_TOKEN`, `BUILDCHAIN_PROMOTION_TOKEN`, and then the consumer\nworkflow's `github.token`; the last fallback can only report issues when it has\nwrite access to the target Buildchain repository.\n\n`publish-required-artifacts-json` can still be passed explicitly for custom\npublish targets. Custom OCI requirements may omit pre-publish refs and digests;\nthe action resolves the exact version ref and validates final digests and any\nbuilt/reused provenance after `lifecycle.publish`. For the default\n`publish-artifact-kind: npm` path, consumers do\nnot download artifacts or run repository scripts to build publish evidence. The\nwrapper downloads the PR-stage payload artifacts, finds the downloaded `.tgz`\npackages, reads each tarball's `package/package.json` for the real scoped\npackage name and version, computes the npm `sha512-...` integrity from the\ntarball bytes, marks the package matching `publish-package-main` as `role:\nmain`, marks the rest as `role: platform`, and passes the generated\n`publish-required-artifacts-json` to `promote-buildchain-ref` before any publish\nside effect. Downloaded platform manifests are still passed into the release\npassport unless `release-passport-platform-manifest-paths` is set explicitly.\nThe same Buildchain contract lock check runs before release-candidate\nresolution and before publish. A compatible `v3` drift leaves an issue in the\nconsumer repository but does not trigger a second heavy build; an incompatible\ndrift fails before publish side effects.\n\nThe wrapper publishes the public release tag as a GitHub Release by default.\nAfter `promote-buildchain-ref` reports a complete release transaction, the\nwrapper creates or updates the public release, marks semver prerelease tags\nsuch as `v1.2.3-alpha.0`, `v1.2.3-rc.1`, or `v22.22.3-kf.3-alpha.7` as\n`prerelease=true` and `make_latest=false`, marks stable semver tags as latest,\nand uploads the publish evidence file plus every file in the generated release\npassport directory, including `buildchain.release.json` and `check-report.json`.\nFor anchored/manual package releases, the public release tag is derived from the\npublished package version and the internal exact transaction tag remains\navailable in the release passport.\nConsumers do not need to hand-write `gh release` logic to trigger\n`release.published` propagation. Set `github-release: false` only for\nrepositories that intentionally do not maintain GitHub Releases.\nIf the transaction still needs protected-ref finalization, the wrapper defers\nGitHub Release creation until the later run that reaches `state=complete`.\n\nCustom publish jobs can also repeat the channel-ref preflight:\n\n```yaml\n- name: Verify publish channel ref still matches\n  run: node .buildchain/runtime/scripts/verify-publish-channel-ref.mjs\n  env:\n    BUILDCHAIN_PUBLISH_SOURCE_REF: ${{ needs.build.outputs.publish-source-ref }}\n    BUILDCHAIN_PUBLISH_SOURCE_SHA: ${{ needs.build.outputs.publish-source-sha }}\n    BUILDCHAIN_SOURCE_REPOSITORY: ${{ github.repository }}\n    GITHUB_TOKEN: ${{ github.token }}\n```\n\nAnchored/manual package release jobs should also make the Buildchain promotion\naction validate that publication is entering through the same\n`publish-gate/{alpha,release,major}` source-lock contract before any package\npublish side effect:\n\n```yaml\n- name: Promote release ref and publish npm package set\n  uses: kungfu-systems/buildchain/actions/promote-buildchain-ref@v3\n  with:\n    sha: ${{ needs.build.outputs.publish-source-sha }}\n    target-ref: release/v22/v22.22\n    require-publish-source-lock: \"true\"\n    publish-source-ref: ${{ needs.build.outputs.publish-source-ref }}\n    publish-source-sha: ${{ needs.build.outputs.publish-source-sha }}\n    publish-source-locked: ${{ needs.build.outputs.publish-source-locked }}\n```\n\n`target-ref` stays the Buildchain channel promotion target, such as\n`alpha/v22/v22.22`, `release/v22/v22.22`, or `publish-gate/major`.\n`publish-source-ref` is the reviewed source-lock branch that authorized this\nspecific package publication. For alpha and release package publications, the\nsource-lock branch must point at the exact channel-line commit that promotion is\nvalidating; it is not a replacement for `target-ref`.\n\nThis keeps the version bump commit, publish authorization, and auditable publish\nentrypoint on the Buildchain source-lock protocol. The CLI form\n`buildchain publish-source validate-anchored-release --json` is still useful for\ncustom publish scripts, but the preferred GitHub Actions gate is the promotion\naction input above. A publish job that still runs directly from `alpha/*` or\n`release/*` channel branches fails this check because those refs are channel\nstate, not publish-gate decisions.\n\n## Package-Set Publish Plan\n\nProjects that publish multiple packages should treat package publication as a\npackage-set operation. Buildchain's package-set planner uses these rules:\n\n- platform packages publish first;\n- the main package publishes last;\n- the dist-tag move happens only after the full package set is present;\n- reruns accept already-published packages only when package name, version, and\n  integrity match;\n- an existing package with different integrity is a hard failure.\n\nThis keeps a consumer from observing a floating dist-tag that points to a main\npackage before all platform artifacts for the same source SHA are available.\n\n## Command Sources\n\nThe workflow runs `.buildchain/buildchain.toml` lifecycle stages by default:\n\n```toml\n[lifecycle.install]\ncommand = \"corepack yarn install --immutable\"\n\n[lifecycle.build]\ncommands = [\n  \"corepack yarn make\",\n  \"corepack yarn build\",\n]\n\n[lifecycle.verify]\ncommand = \"corepack yarn test\"\n```\n\nCallers can override any stage for one invocation:\n\n```yaml\nwith:\n  build-command: cmake --build build --config Release\n  verify-command: ctest --test-dir build --output-on-failure\n```\n\nEvery native and container matrix job is bounded by\n`lifecycle-timeout-minutes`, which defaults to 120 minutes. The same input is\nthe fallback deadline for each install, build, and verify action, so a hung\ncommand fails with the lifecycle name and matrix platform before it can occupy\na self-hosted runner indefinitely. A stage-level `timeout_minutes` in\n`buildchain.toml` remains the more specific override for that stage.\n\n```yaml\nwith:\n  lifecycle-timeout-minutes: 90\n```\n\nThe reusable build workflow samples the build lifecycle by default and carries\nthe generated summary into the final verify diagnostics. Callers can override\nthe sidecar path or disable sampling:\n\n```yaml\nwith:\n  sample-process-tree: true\n  process-summary-path: .buildchain/diagnostics/process-summary.json\n  process-sample-interval-ms: 15000\n  requested-parallelism: 20\n```\n\nWhen `sample-process-tree` is true, Buildchain wraps either `build-command` or\nthe configured `lifecycle.build` stage with `buildchain sample process-tree`.\nThe path is relative to the checked-out workspace and is read again during the\nfinal verify lifecycle. Custom workflows can still write their own sampler\nsummary and pass `process-summary-path`; Buildchain reads the file after the\nlifecycle command finishes, so it may be produced during the same invocation.\nWhen the build stage is optional, the reusable workflow treats the default\nsampler path as optional during verify; an explicitly supplied\n`process-summary-path` remains required.\n\nFor custom workflows, use the action directly:\n\n```yaml\n- uses: kungfu-systems/buildchain/actions/run-lifecycle@v3\n  with:\n    stage: build\n    required: \"true\"\n    timeout-minutes: \"90\"\n    artifact-name: libnode-linux-x64-${{ github.sha }}\n    artifact-paths: |\n      dist\n      build/stage\n```\n\n## Artifact Contract\n\nEach platform upload uses `artifact-name-template`. The default is:\n\n```text\n{artifact}-{platform}-{sha}\n```\n\nSupported placeholders are `{artifact}`, `{artifactName}`, `{platform}`,\n`{platformId}`, `{platformName}`, `{sha}`, `{shortSha}`, `{ref}`, `{runId}`,\nand `{runAttempt}`. Invalid GitHub artifact name characters are normalized to\n`-`, so `{ref}` remains deterministic even for refs such as\n`refs/heads/dev/v3/v3.0`.\n\nEach platform also writes and uploads:\n\n```text\n.buildchain/artifacts/<platform-id>/manifest.json\n.buildchain/artifacts/<platform-id>/summary.json\n```\n\nThe manifest schema is:\n\n```json\n{\n  \"schemaVersion\": 1,\n  \"contract\": \"kungfu-buildchain-artifact\",\n  \"artifactName\": \"libnode-linux-x64-<sha>\",\n  \"platform\": {\n    \"id\": \"linux-x64\",\n    \"name\": \"Linux x64\",\n    \"os\": \"Linux\",\n    \"arch\": \"X64\"\n  },\n  \"git\": {\n    \"repository\": \"kungfu-systems/libnode\",\n    \"sha\": \"<sha>\",\n    \"ref\": \"<ref>\",\n    \"runId\": \"<run id>\",\n    \"runAttempt\": \"<attempt>\"\n  },\n  \"lifecycle\": {\n    \"stage\": \"verify\",\n    \"commandSource\": \"buildchain.toml\",\n    \"executed\": true\n  },\n  \"summary\": {\n    \"contract\": \"kungfu-buildchain-artifact-summary\",\n    \"artifactName\": \"libnode-linux-x64-<sha>\",\n    \"fileCount\": 1,\n    \"totalBytes\": 1234,\n    \"digest\": \"<hex>\"\n  },\n  \"expectedArtifacts\": {\n    \"ok\": true,\n    \"source\": \"expected-artifacts-json\",\n    \"checks\": []\n  },\n  \"files\": [\n    {\n      \"path\": \"dist/example.zip\",\n      \"size\": 1234,\n      \"sha256\": \"<hex>\"\n    }\n  ]\n}\n```\n\nArtifact names do not include actor names, timestamps, or retry counters. Reruns\nproduce a new GitHub Actions run but keep the same source SHA/platform contract.\n\n`expected-artifacts-json` fails the build before upload when the artifact does\nnot match the caller's declared contract. Supported checks are:\n\n| Field           | Meaning                              |\n| --------------- | ------------------------------------ |\n| `minFiles`      | Minimum number of manifest files     |\n| `maxFiles`      | Maximum number of manifest files     |\n| `minTotalBytes` | Minimum total byte count             |\n| `requiredPaths` | Exact manifest paths that must exist |\n\n## Trusted Event Gate\n\nThe workflow has an explicit `trust-gate` job. By default, pull requests from\nforks fail before any build job can reach self-hosted runners, secrets,\npublishing credentials, or heavyweight build commands. Same-repository PRs,\nworkflow dispatches, and protected branch events can proceed.\n\nIf a repository wants fork PRs to skip rather than fail, it can set:\n\n```yaml\nwith:\n  untrusted-policy: skip\n```\n\nDo not set `require-trusted-event: false` for workflows that use self-hosted\nrunners or secrets.\n\nThe build matrix and the workflow control plane are routed independently. The\nmatrix continues to use `runner-preset` and `platforms-json`. Consumers with a\ngoverned runner may also move channel resolution, trust evaluation, contract\nresolution, controller evidence, artifact transfer, and aggregation off the\ndefault GitHub-hosted runner:\n\n```yaml\nwith:\n  control-runner-json: '[\"self-hosted\",\"agent-120\"]'\n  runner-preset: custom\n  platforms-json: '[{\"id\":\"linux-x64\",\"name\":\"Linux x64\",\"runner\":\"[\\\"self-hosted\\\",\\\"agent-120\\\"]\"}]'\n```\n\n`control-runner-json` is additive and defaults to `[\"ubuntu-24.04\"]`. Keep\n`require-trusted-event: true` whenever either runner input selects\n`self-hosted`; a self-hosted control plane must not be exposed to untrusted fork\nevents or arbitrary caller-controlled workflow code.\n\n`require-trusted-event` controls access to build runners. It does not override\nthe publish gate: pull requests remain non-publishing events.\n\n## Fixture\n\n`fixtures/libnode-shaped` is the contract fixture. It has:\n\n- `package.json` version state;\n- `.buildchain/buildchain.toml` with `install`, `build`, `verify`, and `publish`;\n- cross-platform Node scripts that create small `dist/` outputs;\n- `Build Surface Fixture` workflow coverage.\n\nThe fixture proves the reusable surface without running the real libnode native\nbuild."
     },
     {
       "id": "manual:runtime-train-validation",
@@ -3644,7 +3690,7 @@
       ],
       "maturity": "stable",
       "sourcePath": "docs/stable-candidate-patrol.md",
-      "digest": "sha256:fc3011acb007f60eae0f7035ed57e4828ab264951e47841d2f8835ca6ee0c60c",
+      "digest": "sha256:b21e8203b91af8280573ee9bc50395f87d43c75ee279d5e7e612fbd08da7e665",
       "headings": [
         {
           "level": 1,
@@ -3677,7 +3723,7 @@
           "anchor": "durable-recovery"
         }
       ],
-      "markdown": "---\nstatus: preview\nperiod: ongoing\ntheme: stable-candidate-patrol\ndoc_type: architecture-and-usage\nsource_level: local-files\nconfidence: high\nsensitivity: public\nevidence_grade: A\nreview_state: self-reviewed\nlast_reviewed: 2026-07-31\nai_provenance:\n  model_family: GPT-5\n  product: Codex\n  generated_at: 2026-07-11\n  visible_context: Buildchain candidate passport, stable gate, Patrol, publish transaction, exact source-lock PR contracts, tests, and user consensus.\n  invisible_context_boundary: No credentials, private logs, or unpublished consumer content were used.\n---\n\n# Stable Candidate Patrol\n\nBuildchain can treat every exact alpha as an independent stable candidate. A\nnew alpha creates a new candidate; it does not silently revoke an older alpha\nthat already completed its checks and soak interval.\n\n## Candidate lifecycle\n\nThe durable ledger contract is `kungfu-buildchain-stable-candidate-ledger`:\n\n```text\nregistered -> soaking -> qualified -> promoted\n                       \\-> revoked\n```\n\nEach entry binds an exact alpha version to one immutable commit SHA. Registering\nthe same version at another SHA fails closed. Qualification records the required\nchecks, their completion times, the derived soak start, and elapsed time.\n\nScheduled selection chooses the newest `qualified` candidate that is neither\n`revoked` nor already `promoted`. A newer alpha that is still `soaking` does not\nhide an older qualified candidate. Once a stable version is promoted, remaining\nalphas for that exact stable version are closed because that immutable stable\nversion has been consumed; their later product changes continue through the\nnext patch alpha prepared by the normal release transaction.\n\nFor Buildchain's own release line, successful Alpha Self-Dogfood starts an\nidempotent qualification producer for the exact alpha SHA. It dispatches the\nexisting `Build Surface Fixture` at the immutable exact tag, runs the existing\n`site-libkungfu-dev` no-apply canary with the exact SHA, and writes the declared\ncommit-status attestation only after that authoritative canary succeeds. The\nproducer creates evidence only: Patrol still owns qualification and selection,\nand the normal source-lock PR, stable gate, transaction, and branch protections\nremain mandatory.\n\nCross-repository dispatch and repository-local attestation use separate tokens.\nThe promotion token can start the no-apply consumer workflow, while the\nrepository-scoped Actions token writes the status as `github-actions[bot]` only\nafter the producer has observed the successful authoritative workflow run. The\nstable gate still verifies the workflow identity, exact runtime SHA, target URL,\nand allowed attestor before accepting that status.\n\nWhen a candidate changes the outer reusable-workflow YAML itself, the stable\nshell cannot exercise that change through a runtime override. A maintainer may\nmanually qualify it with `canary-ref` set to a dispatchable consumer branch or\ntag and `canary-sha` set to the exact 40-character commit that ref must resolve\nto. That consumer workflow pins the candidate's exact Buildchain SHA. The\nqualification producer verifies the ref binding before dispatch, accepts only a\nrun whose source SHA matches, and writes the normal candidate-bound status only\nafter success. The automatic path continues to use the consumer default branch.\n\n## Repository policy\n\nDeclare the default once in `.buildchain/buildchain.toml`:\n\n```toml\n[release.stable]\nstrategy = \"latest-qualified-alpha\"\ntimezone = \"Asia/Shanghai\"\npublish_at = \"03:00\"\nminimum_soak_seconds = 3600\nrequired_checks = [\n  \"alpha-release\",\n  \"workflow:Build\",\n  \"status:buildchain-canary/consumer\",\n]\nauto_promote = true\nauto_merge = true\n```\n\nCheck identifiers use these forms:\n\n- `alpha-release`: the exact GitHub prerelease publication fact;\n- `workflow:<name>`: a successful Actions workflow run on the exact candidate SHA;\n- `status:<context>`: a successful commit status on the exact candidate SHA;\n- an unprefixed value: an exact status context or check-run name.\n\nCandidate discovery uses immutable exact alpha Git tags. When a repository also\npublishes GitHub prereleases, `alpha-release` binds qualification to that public\nrelease fact. Repositories that intentionally disable GitHub Releases omit\n`alpha-release` and declare their own exact-SHA workflow/status evidence; tag\ncommit time remains the earliest possible soak start.\n\n`publish_at` and `timezone` are the auditable policy declaration. GitHub only\nstarts scheduled workflows from caller-owned cron, so the thin caller keeps the\nmatching UTC trigger:\n\n```yaml\nname: Stable Candidate Patrol\n\non:\n  schedule:\n    - cron: \"0 19 * * *\" # 03:00 Asia/Shanghai\n  workflow_dispatch:\n    inputs:\n      release-now:\n        description: Exact alpha selected by explicit human authority\n        required: false\n        default: \"\"\n\npermissions:\n  contents: write\n  pull-requests: write\n  checks: read\n  statuses: read\n\njobs:\n  stable:\n    uses: kungfu-systems/buildchain/.github/workflows/stable-candidate-patrol.yml@v3\n    with:\n      release-now: ${{ inputs.release-now }}\n      dry-run: false\n    secrets:\n      promotion-token: ${{ secrets.BUILDCHAIN_PROMOTION_TOKEN }}\n      approval-token: ${{ secrets.BUILDCHAIN_APPROVAL_TOKEN }}\n```\n\nThe promotion token must be repository-owned and capable of creating the\nmachine ledger branch, exact source-lock branch, and pull request. Repositories\nthat require an approving review can pass an independent repository-owned App,\nbot, or human service-account token as `approval-token`. The approval identity\nmust differ from the promotion token identity that opens the PR. When no\n`approval-token` is passed, `auto-approve: true` falls back to the caller\n`github.token` and therefore requires GitHub Actions approval permission. The\ngenerated PR may use auto-merge, but it never bypasses the target branch checks.\n\nBefore enabling `auto-approve` and `auto-merge`, the caller repository must\nprovide one approval path and enable auto-merge:\n\n- pass an independent `approval-token`; or enable **Actions > General >\n  Workflow permissions > Allow GitHub Actions to create and approve pull\n  requests**, so the caller `github.token` can approve independently from the\n  promotion token that opened the PR;\n- **General > Pull Requests > Allow auto-merge**, so Patrol can arm the\n  protected merge while required reviews and checks are still pending.\n\nGitHub rejects approval from the same identity that opened the pull request;\nPatrol propagates that review failure instead of reporting success.\n\nPatrol treats a GraphQL refusal to enable auto-merge as a hard failure. A run\nmust not report publication authority when GitHub accepted the HTTP request but\nreturned a GraphQL error in the response body.\n\n## Exact-source stable promotion\n\nFor a selected `3.0.2-alpha.4`, Patrol creates the immutable source branch:\n\n```text\npublish-gate/release/v3/v3.0/3.0.2-alpha.4\n```\n\nand opens it against `release/v3/v3.0`. This is an existing strict Buildchain\ngovernance path. The PR freezes the qualified candidate even if `v3.0-alpha`\nor `alpha/v3/v3.0` has already moved to alpha.5. Normal Verify,\nrelease-candidate resolution, source-tree equivalence, publish transaction,\npassport, registry, tag, and floating-ref checks still run.\n\n## Hold, revoke, and immediate release\n\nPersistent repository controls can be supplied as reusable-workflow inputs or\nrepository variables:\n\n```text\nBUILDCHAIN_STABLE_HOLD=true\nBUILDCHAIN_STABLE_HOLD_REASON=release freeze\nBUILDCHAIN_STABLE_REVOKED_ALPHA_VERSIONS=2.12.0-alpha.5,2.12.0-alpha.7\nBUILDCHAIN_STABLE_REVOKE_REASON=consumer regression\n```\n\nRevocation is explicit evidence; publishing a newer alpha alone is not\nrevocation. A manual `workflow_dispatch` `release-now` chooses one exact,\nnon-revoked candidate immediately. It may bypass the scheduled soak decision,\nbut cannot change candidate SHA, reuse a consumed stable version, or bypass the\nsource-lock PR and publish transaction.\n\nFor Buildchain's own stable gate, Patrol automatically projects that explicit\nhuman decision into the exact-candidate `BUILDCHAIN_STABLE_RELEASE_NOW` and\nreason variables. A later Patrol run removes them after it observes the public\nstable release. This is an internal compatibility projection, not a manual user\nstep; the durable authority record remains the candidate ledger entry and PR.\n\n## Durable recovery\n\nThe default ledger ref is derived from the release line, for example:\n\n```text\nbuildchain/candidate-ledger/v3/v3.0\n```\n\nIt stores `.buildchain/stable-candidate-ledger.json`. Patrol runs are serialized\nper repository and release line. Repeated runs reuse the same exact source-lock\nbranch and PR, while later runs observe the public stable release and mark the\ncandidate `promoted`.\n\nWhen Patrol is enabled after a stable version already exists, it reconstructs\nthat consumed patch from GitHub Release truth and closes historical alpha\ncandidates for the same stable version. It never attempts to republish an\nalready claimed exact stable version."
+      "markdown": "---\nstatus: preview\nperiod: ongoing\ntheme: stable-candidate-patrol\ndoc_type: architecture-and-usage\nsource_level: local-files\nconfidence: high\nsensitivity: public\nevidence_grade: A\nreview_state: self-reviewed\nlast_reviewed: 2026-08-03\nai_provenance:\n  model_family: GPT-5\n  product: Codex\n  generated_at: 2026-07-11\n  visible_context: Buildchain candidate passport, stable gate, Patrol, publish transaction, exact source-lock PR contracts, tests, and user consensus.\n  invisible_context_boundary: No credentials, private logs, or unpublished consumer content were used.\n---\n\n# Stable Candidate Patrol\n\nBuildchain can treat every exact alpha as an independent stable candidate. A\nnew alpha creates a new candidate; it does not silently revoke an older alpha\nthat already completed its checks and soak interval.\n\n## Candidate lifecycle\n\nThe durable ledger contract is `kungfu-buildchain-stable-candidate-ledger`:\n\n```text\nregistered -> soaking -> qualified -> promoted\n                       \\-> revoked\n```\n\nEach entry binds an exact alpha version to one immutable commit SHA. Registering\nthe same version at another SHA fails closed. Qualification records the required\nchecks, their completion times, the derived soak start, and elapsed time.\n\nScheduled selection chooses the newest `qualified` candidate that is neither\n`revoked` nor already `promoted`. A newer alpha that is still `soaking` does not\nhide an older qualified candidate. Once a stable version is promoted, remaining\nalphas for that exact stable version are closed because that immutable stable\nversion has been consumed; their later product changes continue through the\nnext patch alpha prepared by the normal release transaction.\n\nFor Buildchain's own release line, successful Alpha Self-Dogfood starts an\nidempotent qualification producer for the exact alpha SHA. It dispatches the\nexisting `Build Surface Fixture` at the immutable exact tag, runs the existing\n`site-libkungfu-dev` no-apply canary with the exact SHA, and writes the declared\ncommit-status attestation only after that authoritative canary succeeds. The\nproducer creates evidence only: Patrol still owns qualification and selection,\nand the normal source-lock PR, stable gate, transaction, and branch protections\nremain mandatory.\n\nCross-repository dispatch and repository-local attestation use separate tokens.\nThe promotion token can start the no-apply consumer workflow, while the\nrepository-scoped Actions token writes the status as `github-actions[bot]` only\nafter the producer has observed the successful authoritative workflow run. The\nstable gate still verifies the workflow identity, exact runtime SHA, target URL,\nand allowed attestor before accepting that status.\n\nWhen a candidate changes the outer reusable-workflow YAML itself, the stable\nshell cannot exercise that change through a runtime override. A maintainer may\nmanually qualify it with `canary-ref` set to a dispatchable consumer branch or\ntag and `canary-sha` set to the exact 40-character commit that ref must resolve\nto. That consumer workflow pins the candidate's exact Buildchain SHA. The\nqualification producer verifies the ref binding before dispatch, accepts only a\nrun whose source SHA matches, and writes the normal candidate-bound status only\nafter success. The automatic path continues to use the consumer default branch.\n\n## Repository policy\n\nDeclare the default once in `.buildchain/buildchain.toml`:\n\n```toml\n[release.stable]\nstrategy = \"latest-qualified-alpha\"\ntimezone = \"Asia/Shanghai\"\npublish_at = \"03:00\"\nminimum_soak_seconds = 3600\nrequired_checks = [\n  \"alpha-release\",\n  \"workflow:Build\",\n  \"status:buildchain-canary/consumer\",\n]\nauto_promote = true\nauto_merge = true\n```\n\nCheck identifiers use these forms:\n\n- `alpha-release`: the exact GitHub prerelease publication fact;\n- `workflow:<name>`: a successful Actions workflow run on the exact candidate SHA;\n- `status:<context>`: a successful commit status on the exact candidate SHA;\n- an unprefixed value: an exact status context or check-run name.\n\nCandidate discovery uses immutable exact alpha Git tags. When a repository also\npublishes GitHub prereleases, `alpha-release` binds qualification to that public\nrelease fact. Repositories that intentionally disable GitHub Releases omit\n`alpha-release` and declare their own exact-SHA workflow/status evidence; tag\ncommit time remains the earliest possible soak start.\n\n`publish_at` and `timezone` are the auditable policy declaration. GitHub only\nstarts scheduled workflows from caller-owned cron, so the thin caller keeps the\nmatching UTC trigger:\n\n```yaml\nname: Stable Candidate Patrol\n\non:\n  schedule:\n    - cron: \"0 19 * * *\" # 03:00 Asia/Shanghai\n  workflow_dispatch:\n    inputs:\n      release-now:\n        description: Exact alpha selected by explicit human authority\n        required: false\n        default: \"\"\n\npermissions:\n  contents: write\n  pull-requests: write\n  checks: read\n  statuses: read\n\njobs:\n  stable:\n    uses: kungfu-systems/buildchain/.github/workflows/stable-candidate-patrol.yml@v3\n    with:\n      release-now: ${{ inputs.release-now }}\n      dry-run: false\n    secrets:\n      promotion-token: ${{ secrets.BUILDCHAIN_PROMOTION_TOKEN }}\n      approval-token: ${{ secrets.BUILDCHAIN_APPROVAL_TOKEN }}\n```\n\nThe promotion token must be repository-owned and capable of creating the\nmachine ledger branch, exact source-lock branch, and pull request. Repositories\nthat require an approving review can pass an independent repository-owned App,\nbot, or human service-account token as `approval-token`. The approval identity\nmust differ from the promotion token identity that opens the PR. When no\n`approval-token` is passed, `auto-approve: true` falls back to the caller\n`github.token` and therefore requires GitHub Actions approval permission. The\ngenerated PR may use auto-merge, but it never bypasses the target branch\nchecks. Callers can select `merge-method: merge`, `squash`, or `rebase`; the\ndefault is `merge` for compatibility. Unsupported values fail closed before\nGitHub is called.\n\nBefore enabling `auto-approve` and `auto-merge`, the caller repository must\nprovide one approval path and enable auto-merge:\n\n- pass an independent `approval-token`; or enable **Actions > General >\n  Workflow permissions > Allow GitHub Actions to create and approve pull\n  requests**, so the caller `github.token` can approve independently from the\n  promotion token that opened the PR;\n- **General > Pull Requests > Allow auto-merge**, so Patrol can arm the\n  protected merge while required reviews and checks are still pending.\n\nGitHub rejects approval from the same identity that opened the pull request;\nPatrol propagates that review failure instead of reporting success.\n\nPatrol treats a GraphQL refusal to enable auto-merge as a hard failure. A run\nmust not report publication authority when GitHub accepted the HTTP request but\nreturned a GraphQL error in the response body.\n\n## Exact-source stable promotion\n\nFor a selected `3.0.2-alpha.4`, Patrol creates the immutable source branch:\n\n```text\npublish-gate/release/v3/v3.0/3.0.2-alpha.4\n```\n\nand opens it against `release/v3/v3.0`. This is an existing strict Buildchain\ngovernance path. The PR freezes the qualified candidate even if `v3.0-alpha`\nor `alpha/v3/v3.0` has already moved to alpha.5. Normal Verify,\nrelease-candidate resolution, source-tree equivalence, publish transaction,\npassport, registry, tag, and floating-ref checks still run.\n\n## Hold, revoke, and immediate release\n\nPersistent repository controls can be supplied as reusable-workflow inputs or\nrepository variables:\n\n```text\nBUILDCHAIN_STABLE_HOLD=true\nBUILDCHAIN_STABLE_HOLD_REASON=release freeze\nBUILDCHAIN_STABLE_REVOKED_ALPHA_VERSIONS=2.12.0-alpha.5,2.12.0-alpha.7\nBUILDCHAIN_STABLE_REVOKE_REASON=consumer regression\n```\n\nRevocation is explicit evidence; publishing a newer alpha alone is not\nrevocation. A manual `workflow_dispatch` `release-now` chooses one exact,\nnon-revoked candidate immediately. It may bypass the scheduled soak decision,\nbut cannot change candidate SHA, reuse a consumed stable version, or bypass the\nsource-lock PR and publish transaction.\n\nFor Buildchain's own stable gate, Patrol automatically projects that explicit\nhuman decision into the exact-candidate `BUILDCHAIN_STABLE_RELEASE_NOW` and\nreason variables. A later Patrol run removes them after it observes the public\nstable release. This is an internal compatibility projection, not a manual user\nstep; the durable authority record remains the candidate ledger entry and PR.\n\n## Durable recovery\n\nThe default ledger ref is derived from the release line, for example:\n\n```text\nbuildchain/candidate-ledger/v3/v3.0\n```\n\nIt stores `.buildchain/stable-candidate-ledger.json`. Patrol runs are serialized\nper repository and release line. Repeated runs reuse the same exact source-lock\nbranch and PR, while later runs observe the public stable release and mark the\ncandidate `promoted`.\n\nWhen Patrol is enabled after a stable version already exists, it reconstructs\nthat consumed patch from GitHub Release truth and closes historical alpha\ncandidates for the same stable version. It never attempts to republish an\nalready claimed exact stable version."
     },
     {
       "id": "manual:toolkit-observability",