Build an extension
Start from the installed, version-matched authoring kit; inspect, scaffold, validate, build, qualify, and package inert bytes before requesting native admission.
Sourcesauthoring-kitKFX developer surface · alpha-source-projection
Extend Kungfu without forking Core.
KFX packages and Profile Suites add experiences, integrations, services, actions, assessments, and domain semantics through one Core-owned registry and lifecycle authority.
Build against a public extension contract, let Core admit exact content and capabilities, and project one semantic contribution across GUI, TUI, CLI, and Agent hosts.
Choose a reading path
Start from the job you need to do.
Understand the architecture
Trace provider-owned semantics through package facets, Core control-plane decisions, admitted contributions, and host-native presentation.
Sourceskfx-contractsurface-parity-adrAudit trust and lifecycle
Inspect immutable source, maturity, non-claims, admission inputs, capability grants, Warrants, and receipts before relying on a package.
Sourceslifecycle-adrtrust-admission-adrArchitecture · human and Agent parity
One extension graph; one Core authority; four host projections.
Providers author immutable package or Suite facets. Core discovers and admits their exact graph, intersects capabilities with policy and authorization, owns lifecycle mutations, and emits receipts. GUI, TUI, CLI, and Agent hosts render admitted semantics without becoming authority.
Author and package
Author / provider
Owns extension source, package identity, declared facets, capabilities, and contribution semantics.
Sourceskfx-contractKFX package / Profile Suite
Immutable content closure that may carry one package or a Suite of required and optional members.
Sourceskfx-contractprofile-suite-adrPackage and Suite facets
View
Host-rendered experience facet with declared entrypoint and capabilities.
Sourceskfx-contractAdapter
Integration facet for declared targets and managed Python or Node entrypoints.
Sourceskfx-contractService
Process-isolated service facet with explicit runtime, host contract, and capabilities.
Sourceskfx-contractauthoring-kitAction
Surface-neutral intent and operation semantics retained by a Profile Suite.
Sourceskfx-contractsurface-parity-adrAssessment
Purpose-bound evidence and policy evaluation, not a lifecycle mutation or capability grant.
Sourceskfx-contracttrust-admission-adrProfile
Domain semantic closure over members, facts, actions, views, policies, and qualification references.
Sourceskfx-contractprofile-suite-adrKFD and Buildchain trust evidence
KFD assessment evidence
Fresh, purpose-bound assessment facts may inform admission but do not authorize mutation or execution.
Sourceskfx-contracttrust-admission-adrBuildchain exact-artifact evidence
Verifier result and provenance roots bind the exact source, dependencies, build plan, toolchain, artifact, and qualification evidence.
Sourceskfx-contracttrust-admission-adrCore registry, admission, capability, lifecycle, and receipts
Core registry + semantic graph
Indexes providers, extension points, contributions, dependencies, versions, trust, and capability roots.
Sourceskfx-contractnative-registryAdmission assessment
Evaluates exact package, dependency, KFD, Buildchain, policy, and purpose-bound inputs without mutating lifecycle.
Sourceskfx-contracttrust-admission-adrCapability + Warrant boundary
Intersects declarations with Core and workspace policy, required approvals, exact authorization roots, and Work/Warrant evidence.
Sourceskfx-contracttrust-admission-adrTransactional lifecycle
One fenced Core writer owns plan, authorize, apply, rollback, and history over immutable package roots.
Sourceskfx-contractnative-registrylifecycle-adrReceipt + retained facts
Applied or refused outcomes retain exact authority, capability, lifecycle, and evidence dependencies.
Sourceskfx-contractnative-registrylifecycle-adrAdmitted contribution
Admitted semantic contribution
A Core-resolved contribution plan that preserves provider ownership and exact authority roots.
Sourceskfx-contractsurface-parity-adrGUI, TUI, CLI, and Agent surfaces
GUI
Host-native visual projection of the admitted semantic contribution.
Sourcessurface-parity-adrTUI
Host-native terminal UI projection of the same admitted semantics.
Sourcessurface-parity-adrCLI
Human command projection over the same Core-owned plan and receipt contract.
Sourcessurface-parity-adrAgent
Machine-readable projection over the same contribution, action, authority, and receipt identity.
Sourcessurface-parity-adrprofile-suite-adrExact graph relationships
- Author / provider authors KFX package / Profile Suite source-defined-alpha
- KFX package / Profile Suite declares View source-defined-alpha
- KFX package / Profile Suite declares Adapter source-defined-alpha
- KFX package / Profile Suite declares Service source-defined-alpha
- KFX package / Profile Suite closes over Action source-defined-alpha
- KFX package / Profile Suite closes over Assessment source-defined-alpha
- KFX package / Profile Suite may define Profile source-defined-alpha
- KFX package / Profile Suite is discovered and indexed by Core registry + semantic graph implemented-exact-source
- KFD assessment evidence informs Admission assessment purpose-bound-evidence
- Buildchain exact-artifact evidence binds exact artifact for Admission assessment exact-artifact-evidence
- Core registry + semantic graph supplies exact graph roots to Admission assessment implemented-exact-source
- Admission assessment constrains Capability + Warrant boundary implemented-exact-source
- Capability + Warrant boundary authorizes exact mutation for Transactional lifecycle implemented-exact-source
- Transactional lifecycle emits Receipt + retained facts implemented-exact-source
- Transactional lifecycle activates admitted plan as Admitted semantic contribution implemented-exact-source
- Admitted semantic contribution projects to GUI qualified-upstream-scope
- Admitted semantic contribution projects to TUI qualified-upstream-scope
- Admitted semantic contribution projects to CLI qualified-upstream-scope
- Admitted semantic contribution projects to Agent qualified-upstream-scope
Capability map · human and Agent parity
Choose the extension job, then inspect its maturity and authority boundary.
build
Build
Create and qualify inert extension source and artifacts.
Inspect, scaffold, validate, build, qualify, and package
Version-matched offline authoring commands and SDK projection; no lifecycle authority is granted.
Status: available-in-installed-product
Sourcesauthoring-kitStart a service KFX
Dependency-free Node webhook starter with synthetic credentials and loopback-only qualification.
Status: reference-starter
Sourcesauthoring-kitconnect
Connect
Join external systems through bounded adapters and services.
Adapters
Declare targets, runtime entrypoints, and least capabilities for an integrated adapter.
Status: contract-defined
Sourceskfx-contractServices and webhooks
Run process-isolated services under explicit host, network, credential, and lifecycle contracts.
Status: contract-and-reference-defined
Sourceskfx-contractauthoring-kitadd
Add
Contribute product experience and domain semantics without modifying Core.
Views and experiences
Add host-rendered experiences while Core retains semantic and authority roots.
Status: contract-defined
Sourceskfx-contractsurface-parity-adrActions
Declare surface-neutral operations and authorization requirements once.
Status: profile-suite-defined
Sourceskfx-contractprofile-suite-adrAssessments
Evaluate claims and policy at an exact evidence cut without mutating lifecycle.
Status: purpose-bound
Sourceskfx-contracttrust-admission-adrProfile Suites
Package domain facts, actions, views, policies, qualification, and member closure above domain-neutral Core.
Status: contract-defined
Sourceskfx-contractprofile-suite-adrlifecycle
Lifecycle
Move exact content through Core-owned state transitions.
Inspect and plan
Resolve package closure, registry graph, trust inputs, capability diff, and exact expected roots before mutation.
Status: read-only
Sourceskfx-contractnative-registrylifecycle-adrAuthorize and apply
Recompute exact roots and require purpose-bound capability, approval, Work, and Warrant evidence before side effects.
Status: warrant-required
Sourceskfx-contractlifecycle-adrtrust-admission-adrActivate, observe, diagnose, upgrade, rollback, and remove
One fenced writer advances lifecycle and retains applied or refused history and recovery evidence.
Status: core-authoritative
Sourceskfx-contractnative-registrylifecycle-adrtrust
Trust
Bind reliance to exact evidence without collapsing evidence into authority.
Immutable package and dependency roots
Content identity and dependency closure are verified before they can enter Core lifecycle.
Status: required-input
Sourceskfx-contractlifecycle-adrKFD purpose-bound assessment
Fresh assessment facts can reduce policy-defined friction but cannot mint capability or mutation authority.
Status: admission-input
Sourceskfx-contracttrust-admission-adrBuildchain exact-artifact attestation
Binds source, dependencies, build plan, toolchain, artifact, qualification, issuer, publisher, and verifier roots.
Status: admission-input
Sourceskfx-contracttrust-admission-adrCapability grant, Warrant, and receipt chain
Exact authorization and outcome roots are retained across plan, apply, settlement, and recovery.
Status: mutation-boundary
Sourceskfx-contractnative-registrylifecycle-adrsurfaces
Surfaces
Project one admitted semantic contribution through host-native interfaces.
GUI
Sandboxed visual host projection; it does not own lifecycle authority.
Status: host-projection
Sourceskfx-contractsurface-parity-adrTUI
Terminal UI projection over the same Core descriptor and roots.
Status: host-projection
Sourceskfx-contractsurface-parity-adrCLI
Human command projection over the same plan and receipt identity.
Status: host-projection
Sourceskfx-contractsurface-parity-adrAgent
Machine-readable contribution, action, plan, Work/Warrant, and receipt projection.
Status: machine-projection
Sourceskfx-contractsurface-parity-adrprofile-suite-adrImmutable authority
Every technical claim resolves to exact Kungfu bytes.
kfx-contract
Package, Suite, facet, registry, admission, capability, lifecycle, receipt, and host contract
c40f7a1a4149140558c655fa940d923bcc3c4154
sha256:4c17dddae597d19eb9ead4d3767669e3f8343a3b41cc9deb42c8eb5ff08a514d
native-registry
Core-owned package discovery, semantic graph, lifecycle, and receipt implementation
c40f7a1a4149140558c655fa940d923bcc3c4154
sha256:98881b2110239f54706b05da88d8a847442b82782a32805aaa6d65faa9b21808
authoring-kit
Version-matched offline authoring lifecycle, SDK projection, and webhook starter
c40f7a1a4149140558c655fa940d923bcc3c4154
sha256:567ffd02c294aacd15e9ea8eb0e1d566c5703e9ec1c1fb81fa32bba781f7d346
lifecycle-adr
Immutable package content and Core-owned transactional lifecycle authority
c40f7a1a4149140558c655fa940d923bcc3c4154
sha256:f175aa649773c0bc24b0eabdba24d7e973e3e050523f7467ca87b042b7cd23cc
surface-parity-adr
One semantic contribution projected through GUI, TUI, CLI, and Agent hosts
c40f7a1a4149140558c655fa940d923bcc3c4154
sha256:f0c68bf2c2e80af8465f5247fb8cab9b2e636c8872c9ab7023b3986a758cca1e
trust-admission-adr
KFD facts and exact Buildchain attestations as non-authorizing admission evidence
c40f7a1a4149140558c655fa940d923bcc3c4154
sha256:cca8bdeee7d6e50f4507ada6e4122cfca2b35099c7ba3a9780d9785c55cce912
profile-suite-adr
Agent-first Profile Suites carrying domain semantics over domain-neutral Core
c40f7a1a4149140558c655fa940d923bcc3c4154
sha256:cb4225f9e967d814585bd4b58ccba858147e8df124842d032240e75314431847
Maturity and non-claims
Source-defined alpha; no authority is manufactured here.
Source boundary: This page is a Site-owned reader synthesis of immutable Kungfu sources. Kungfu owns KFX schemas, commands, admission, capabilities, lifecycle, receipts, and qualification. The Site does not redefine or requalify them.
Adoption boundary: This first surface uses exact Git sources and introduces no unpublished npm dependency. A later upstream-generated KFX Site Bundle may replace this projection after its own protected release and adoption gates.
- This Site projection is not a KFX specification, Release Passport, Warrant, capability grant, installation receipt, or qualification result.
- An authored or locally qualified package is not installed, activated, production-admitted, or safe for every workspace.
- KFD evidence and Buildchain attestations are admission inputs; neither creates ambient runtime authority.
- The exact upstream sources record their own qualification scope. This Site change does not rerun or widen that scope, promise stable APIs, or claim new platform support.
- Presentation hosts do not own registry, admission, capability, lifecycle, or receipt authority.
- A contribution being discoverable, authored, qualified, installed, activated, or running are distinct states.
- Provider identity, first-party placement, Product roles, KFD fitness, or Buildchain provenance does not create ambient authority.
- Capability presence does not imply capability grant, activation, production admission, or universal safety.
- Maturity labels describe the exact cited source scope; they are not a new Site qualification verdict.