Core dist build report

Date: 2026-03-06

Scope

Non-destructive dist build pipeline for packages/core.

Current structure observation

• packages/core does not have a src/ directory.
• The package surface lives at package root:
  • index.ts
  • domain folders like governance/, ledger/, kes/, tender/
• Because of that, the build pipeline was added on top of the existing layout.
• Safe deviation from the generic template:
  • rootDir is ".", not "src"

Package configuration added

Updated files:

• packages/core/package.json
• packages/core/tsconfig.json
• root package.json

Changes:

• main -> dist/index.js
• types -> dist/index.d.ts
• build script -> tsc -p tsconfig.json && node ../../scripts/fix-esm-relative-imports.mjs dist
• dev script -> tsx index.ts
• root build:packages now builds:
  • @kvary/ai-layer
  • @kvary/memory-layer
  • @kvary/core

Build validation

Commands executed:

• npm --prefix packages/core run build
• npm run build:packages
• npm exec -- node -e "import('./packages/core/dist/index.js')..."
• npm exec -- node -e "import('./packages/core/dist/governance/appendGovernanceRecord.js')..."

Results:

• packages/core/dist/index.js present
• packages/core/dist/index.d.ts present
• root dist entrypoint resolved successfully
• representative subpath dist module resolved successfully

Build output count:

• packages/core/dist: 234 files

Import scan

Direct imports referencing packages/core/src/*.js or packages/core/src/*.ts:

• none detected

Files importing @kvary/core package paths:

• apps/web/next.config.js
• apps/web/src/app/[locale]/(portal)/kes/HashVerificationPanel.tsx
• apps/web/src/app/[locale]/(portal)/kes/SigningSlotPanel.tsx
• apps/web/src/app/[locale]/(portal)/kes/page.tsx
• apps/web/src/app/[locale]/[country]/(portal)/kes/HashVerificationPanel.tsx
• apps/web/src/app/[locale]/[country]/(portal)/kes/SigningSlotPanel.tsx
• apps/web/src/app/[locale]/[country]/(portal)/kes/page.tsx
• services/api/src/adapters/kesInput.ts
• services/api/src/auctions/engine.ts
• services/api/src/auctions/engine.js
• services/api/src/auctions/ledger.ts
• services/api/src/auctions/rebuildSnapshot.ts
• services/api/src/auctions/snapshot.ts
• services/api/src/governance/buildSubjectSnapshot.ts
• services/api/src/routes/kes.ts
• services/api/src/routes/kes.js
• services/api/src/state/inMemoryLedger.ts
• services/api/src/tenders/engine.ts
• services/api/src/tenders/engine.js
• services/api/src/tenders/ledger.ts
• services/api/src/tenders/snapshot.ts

Dependency graph observations

• apps/web still aliases @kvary/core to the workspace package root in next.config.js.
• services/api consumes many @kvary/core/* subpaths.
• No exact import "@kvary/core" root-package consumers were detected.
• Current runtime behavior remains source-oriented for many subpath consumers.
• This commit adds buildability and workspace orchestration, not runtime migration.

Potential cleanup candidates

Source JS files still present under packages/core:

• count: 97
• examples:
  • packages/core/index.js
  • packages/core/governance/index.js
  • packages/core/governance/appendGovernanceRecord.js
  • packages/core/ledger/appendLedgerEntry.js
  • packages/core/kes/appendKesProposeVersion.js
  • packages/core/tender/appendTenderTransition.js

These are cleanup candidates for a later phase only after subpath runtime resolution is fully migrated away from source files.

Additional notes

• Two existing TypeScript issues in packages/core blocked the first build:
  • literal narrowing in policy/buildPolicyFreezeRecord.ts
  • implicit any in tender/verifyTenderLifecycle.ts
• They were fixed locally without changing runtime semantics.
• No files were deleted in this commit.