# Contributor handoff — microsoft/rushstack

> Canonical page: https://codevetter.com/unpack/rushstack/agent-handoff

# Contributor handoff — microsoft/rushstack

Scanned commit 1e18b16f029299f53a966878aff2ce187dd65a51 (2026-10-01). Generated by codevetter codevetter 1.15.0 on 2026-10-02.

Source inspection; upstream code and tests were not executed.

Begin at the owning package and follow its manifest, rig, source entrypoint, and relevant tests before widening scope. Shared Rush graph and daemon changes require attention to native execution, retained processes, ownership, and cancellation. Generated files and copied frontend/backend contracts introduce edit-order and build-order traps. Tests and CI were inspected, not executed; recommendations below identify existing checks for a separately authorized execution task.
- Use existing Heft build/test phase scripts for package validation and repository test/retest commands for broader integration when execution is authorized; this investigation inspected those scripts and CI without running them. — [apps/api-extractor/package.json#L62-66](https://github.com/microsoft/rushstack/blob/1e18b16f029299f53a966878aff2ce187dd65a51/apps/api-extractor/package.json#L62-L66) [common/config/rush/command-line.json#L20-35](https://github.com/microsoft/rushstack/blob/1e18b16f029299f53a966878aff2ce187dd65a51/common/config/rush/command-line.json#L20-L35) [.github/workflows/ci.yml#L79-87](https://github.com/microsoft/rushstack/blob/1e18b16f029299f53a966878aff2ce187dd65a51/.github/workflows/ci.yml#L79-L87)
- Read rush.json before choosing tool versions or workspace layout: Rush and PNPM are pinned, Node ranges are constrained, and project folders must have depth two. — [rush.json#L19-29](https://github.com/microsoft/rushstack/blob/1e18b16f029299f53a966878aff2ce187dd65a51/rush.json#L19-L29) [rush.json#L45-45](https://github.com/microsoft/rushstack/blob/1e18b16f029299f53a966878aff2ce187dd65a51/rush.json#L45-L45) [rush.json#L98-99](https://github.com/microsoft/rushstack/blob/1e18b16f029299f53a966878aff2ce187dd65a51/rush.json#L98-L99)
- For Rush lifecycle changes, read phased-commands.md together with PhasedScriptAction; operation creation precedes graph hooks, and watch sessions reuse graph objects rather than recreating operations each iteration. — [docs/rush/phased-commands.md#L38-81](https://github.com/microsoft/rushstack/blob/1e18b16f029299f53a966878aff2ce187dd65a51/docs/rush/phased-commands.md#L38-L81) [libraries/rush-lib/src/cli/scriptActions/PhasedScriptAction.ts#L1038-1040](https://github.com/microsoft/rushstack/blob/1e18b16f029299f53a966878aff2ce187dd65a51/libraries/rush-lib/src/cli/scriptActions/PhasedScriptAction.ts#L1038-L1040) [libraries/rush-lib/src/cli/scriptActions/PhasedScriptAction.ts#L1169-1175](https://github.com/microsoft/rushstack/blob/1e18b16f029299f53a966878aff2ce187dd65a51/libraries/rush-lib/src/cli/scriptActions/PhasedScriptAction.ts#L1169-L1175)
- For API output changes, account for local versus production semantics: local builds can rewrite expected reports and tolerate warnings, while production warnings fail extraction; missing expected-report folders receive special handling. — [apps/api-extractor/src/api/Extractor.ts#L343-350](https://github.com/microsoft/rushstack/blob/1e18b16f029299f53a966878aff2ce187dd65a51/apps/api-extractor/src/api/Extractor.ts#L343-L350) [apps/api-extractor/src/api/Extractor.ts#L421-443](https://github.com/microsoft/rushstack/blob/1e18b16f029299f53a966878aff2ce187dd65a51/apps/api-extractor/src/api/Extractor.ts#L421-L443) [apps/api-extractor/src/api/Extractor.ts#L479-505](https://github.com/microsoft/rushstack/blob/1e18b16f029299f53a966878aff2ce187dd65a51/apps/api-extractor/src/api/Extractor.ts#L479-L505)
- Edit Documenter’s generators and plugin callbacks rather than generated Markdown pages; emitted pages carry a generated-file notice, and every generation empties the configured output directory. — [apps/api-documenter/src/documenters/MarkdownDocumenter.ts#L305-334](https://github.com/microsoft/rushstack/blob/1e18b16f029299f53a966878aff2ce187dd65a51/apps/api-documenter/src/documenters/MarkdownDocumenter.ts#L305-L334) [apps/api-documenter/src/documenters/MarkdownDocumenter.ts#L1305-1307](https://github.com/microsoft/rushstack/blob/1e18b16f029299f53a966878aff2ce187dd65a51/apps/api-documenter/src/documenters/MarkdownDocumenter.ts#L1305-L1307)
- For Explorer contract changes, read the web package alongside the backend: build/lfx-shared and dist are populated by copying frontend-package outputs, and TypeScript compilation depends on the shared-code copy task. — [apps/lockfile-explorer/config/heft.json#L20-64](https://github.com/microsoft/rushstack/blob/1e18b16f029299f53a966878aff2ce187dd65a51/apps/lockfile-explorer/config/heft.json#L20-L64) [apps/lockfile-explorer/src/cli/explorer/ExplorerCommandLineParser.ts#L20-26](https://github.com/microsoft/rushstack/blob/1e18b16f029299f53a966878aff2ce187dd65a51/apps/lockfile-explorer/src/cli/explorer/ExplorerCommandLineParser.ts#L20-L26) [apps/lockfile-explorer-web/src/parsing/readLockfile.ts#L4-20](https://github.com/microsoft/rushstack/blob/1e18b16f029299f53a966878aff2ce187dd65a51/apps/lockfile-explorer-web/src/parsing/readLockfile.ts#L4-L20)
- Daemon dogfooding guidance requires a stable extracted client closure instead of mutable workspace outputs; preserve native fallback/routing behavior and consult descriptor-boundary tests when altering retained child reuse. — [docs/rush/dogfooding-rush-daemon.md#L3-12](https://github.com/microsoft/rushstack/blob/1e18b16f029299f53a966878aff2ce187dd65a51/docs/rush/dogfooding-rush-daemon.md#L3-L12) [apps/rush-cli-client/src/routing.ts#L74-94](https://github.com/microsoft/rushstack/blob/1e18b16f029299f53a966878aff2ce187dd65a51/apps/rush-cli-client/src/routing.ts#L74-L94) [apps/rush-cli-client/src/test/persistentIpcBoundaries.test.ts#L28-79](https://github.com/microsoft/rushstack/blob/1e18b16f029299f53a966878aff2ce187dd65a51/apps/rush-cli-client/src/test/persistentIpcBoundaries.test.ts#L28-L79)
- Treat rushd-review-map.md as historical review context: it names an earlier frozen snapshot and explicitly requires additional review for later fixes, so it does not certify the inspected commit or bound its current risk. — [docs/rush/rushd-review-map.md#L3-17](https://github.com/microsoft/rushstack/blob/1e18b16f029299f53a966878aff2ce187dd65a51/docs/rush/rushd-review-map.md#L3-L17)

Every claim links to its cited files at the pinned commit. Citations identify source evidence; they do not establish runtime correctness. Independent CodeVetter scan — not reviewed by upstream maintainers.

## Public product links

- [CodeVetter](https://codevetter.com/)
- [Download](https://codevetter.com/download)
- [Documentation](https://codevetter.com/docs/)
- [Source](https://github.com/Codevetter/codevetter)
