Cli

Provides the DI-backed execution runtime for AppSurface CLI commands.

Describes one driver's raw and canonical artifact locations for a project invocation.

Result of normalizing one driver's current-invocation coverage artifact.

Validates VSTest engine and direct package capabilities before coverage output is mutated.

Owns coverage-driver arguments and deterministic per-project artifact normalization.

Internal CLI entry point that adds a scoped test seam around AppSurfaceCliApp.

Restores the previously active test override when disposed.

Adapts the CliFx console to the private coverage-core writer boundary.

Polls one protected AppSurface named-canary endpoint until it produces a terminal deployment decision.

Coordinates deterministic named-canary polling without hidden HTTP retries.

Performs one caller-owned delay in the polling state machine.

Uses the configured time provider for production polling delays.

Issues one named-canary HTTP request without following redirects.

Adapts the typed HTTP client to the polling workflow's bounded response contract.

Captures one bounded named-canary HTTP response.

Captures a parsed Retry-After header without retaining raw header text.

Parses the required named-canary compatibility core.

Represents the parsed safe fields required by the polling state machine.

Represents a protocol incompatibility without exposing response content.

Normalizes safe command options and resolves environment-sourced values.

Contains normalized request metadata and non-renderable environment-sourced values.

Contains one non-renderable custom HTTP header.

Represents a safe local command-input failure.

Represents one safe terminal polling result.

Renders one safe terminal result for a person or an automation client.

Appends a bounded, safe result table to a GitHub Actions step summary.

Resolves the AppSurface CLI version string shown by appsurface --version.

Previews AppSurface Docs for a local repository through the public appsurface docs command.

Previews AppSurface Docs for a local repository through the appsurface docs preview alias.

Exports AppSurface Docs for a local repository through the appsurface docs export command.

Verifies one catalog-pinned AppSurface Docs release archive without starting a web host.

Verifies AppSurface Docs harvest health for CI and release gates.

Shared implementation for AppSurface Docs preview commands.

Shared repository, routing, environment, and startup-timeout options for AppSurface docs commands.

Restores the previous process current directory when disposed.

Shared repository command options for AppSurface docs commands that expose strict harvest startup behavior.

Describes the AppSurface Docs host invocation produced by the CLI option translator.

Describes a one-shot AppSurface Docs static export request.

Describes a one-shot AppSurface Docs harvest-health verification request.

Result returned by the AppSurface Docs harvest-health verification runner.

Raw HTTP response returned by the AppSurface Docs harvest-health client seam.

Applies shared host options required by packaged AppSurface docs tooling.

Starts a AppSurface Docs host for CLI preview commands.

Starts the AppSurface Docs host and exports it to static files.

Loads the AppSurface Docs host service graph and verifies the redacted harvest-health response.

Reads the AppSurface Docs harvest-health JSON endpoint.

Builds and starts the AppSurface Docs host used by harvest-health verification.

Adapts the RazorWire static exporter behind a small AppSurface CLI test seam.

Adds AppSurface Docs-specific export graph state after the host starts and before RazorWire crawls it.

Production IAppSurfaceDocsHostRunner that delegates to the standalone AppSurface Docs web host.

Shared exception classification helpers used by command cleanup and best-effort diagnostics.

Reads a command-owned harvest summary from a started AppSurface Docs preview host.

Concise harvest summary emitted by the AppSurface Docs CLI preview command.

Production IAppSurfaceDocsHarvestSummaryReader that reads DocAggregator health.

Describes a preview AppSurface Docs host startup request.

Builds and starts the AppSurface Docs preview host.

Production IAppSurfaceDocsPreviewHostStarter that uses the AppSurface Docs standalone host builder.

Attempts to open the preview docs URL in the user's browser.

Describes the outcome of an attempted browser launch.

Browser launcher that uses the current operating system's conventional URL opener.

Runs the platform command that asks the operating system to open a browser URL.

CliWrap-backed IAppSurfaceDocsBrowserOpenCommandRunner implementation.

Resolves browser-facing URLs for AppSurface Docs preview hosts.

Production export runner that starts the standalone AppSurface Docs host in-process and exports it over real loopback HTTP.

Owns a startup cancellation source until timeout observation needs to transfer that ownership.

Production harvest-health HTTP client used by AppSurfaceDocsInProcessHealthVerifyRunner.

Production IAppSurfaceDocsHealthHostStarter that uses the AppSurface Docs standalone host builder.

Provides a fixed environment name to the standalone host builder during health verification startup.

Starts AppSurface Docs in-process and verifies the redacted harvest-health response over loopback HTTP.

Default AppSurface Docs export configurator that publishes docs route aliases into RazorWire's export graph and captures the frozen route manifest alongside the static output.

Test-seam configurator used when unit tests provide a fake host that does not contain AppSurface Docs services.

Builds and starts the in-process AppSurface Docs export host.

Production IAppSurfaceDocsExportHostStarter that uses the AppSurface Docs standalone host builder.

Provides a fixed environment name to the standalone host builder during export startup.

Production IRazorWireStaticExporter that delegates to RazorWire's ExportEngine.

Previews or explicitly removes stale AppSurface coverage artifacts.

Provides the discoverable root for declared, value-safe secret-transfer commands.

Creates a value-free transfer plan for one declared endpoint job.

Applies one previously-created and still-valid secret-transfer plan.

Verifies that a running web app exposes AppSurface-compatible PWA install or push-readiness evidence.

Fetches verifier resources without automatically following redirects.

Adapts HttpClient to the verifier's bounded, redirect-aware fetch contract.

Captures one bounded HTTP response before verifier-managed redirect handling.

Represents schema-versioned PWA verification evidence written by the CLI.

Represents the schema-v3 report used only for explicitly requested push or combined PWA readiness verification.

Captures install observations embedded in a schema-v3 combined report.

Captures only server-known, privacy-safe push-readiness evidence.

Captures bounded shared-worker fetch evidence.

Captures bounded registration-helper discovery and fetch evidence.

Captures the safe VAPID identity contributed by the optional Push package.

Pairs schema-v3 push evidence with diagnostics collected while verifying it.

Holds validated readiness evidence or the sanitized unavailable state.

Represents one stable, structured PWA verification observation.

Normalizes the trusted origin, application path base, and real entry route used by one verification run.

Carries normalized CLI assertions into a PWA verification run.

Parses the accepted install, push, and all PWA verification surface values.

Parses the accepted enabled and disabled push-expectation values.

Represents one explicit manifest icon size and optional purpose assertion.

Captures the final verifier-managed fetch state after zero or more accepted redirects.

Represents dimensions decoded directly from a bounded PNG response.

Represents privacy-safe fetch and optional PNG dimension evidence for one manifest icon.

Models the manifest fields required for install-readiness verification.

Models one manifest icon declaration without trusting it as fetched evidence.

Models the server-known AppSurface PWA diagnostics used for install, worker, offline, and push posture checks.

Models the versioned, sanitized push-readiness source object emitted by current Web servers.

Converts private coverage-core failures into the stable CliFx command contract.

Creates stable command-layer validation diagnostics before a request enters the coverage core.

Writes the stable binding between one coverage-run project directory and the project that owns it.

Provides the discoverable root for AppSurface local secret commands.

Initializes or verifies a LocalSecrets namespace.

Writes a local secret value.

Verifies a local secret exists without printing its value.

Lists currently retrievable local secret names in a namespace.

Explicitly migrates readable legacy macOS LocalSecrets records into the current v2 Keychain namespace.

Deletes one local secret.

Diagnoses LocalSecrets platform availability.

Shared options and helpers for local secret commands.

Shared options for commands that target one local secret key.

Captures normalized command state.

Writes bounded failure-first test results and best-effort slow-test diagnostic artifacts for coverage run.

Delegates stream operations while reporting positive byte counts from reads.

Written slow-test diagnostic artifact metadata.

Slow-test diagnostic report before overhead fields are finalized.

Project timing metadata included in slow-test diagnostics.

Best-effort parse result for one managed JUnit file.

Parsed JUnit test case timing and bounded failure evidence included in diagnostics.

Provides the discoverable root for consumer-owned release-note workflows.

Holds the filesystem objects that lead to a coverage output directory while ownership is inspected and the directory is prepared. The lease prevents pathname validation from being separated from mutation by an ancestor rename or link replacement.

Provides the discoverable root for AppSurface EvidenceHost commands.

Creates a marked, non-overwriting EvidenceHost starter for an existing repository.

Checks selected EvidenceHost prerequisites without provisioning resources or executing tests.

Resolves a policy and explicit diff into a plan without starting resources or executing producers.

Executes the selected built-in evidence producer and emits a truthful manifest.

Verifies that an immutable evidence manifest binds to its resolved plan without rerunning producers.

Provides shared policy and diff options for non-mutating and execution EvidenceHost commands.

Creates provider clients for declared Google transfer endpoints.

Persists value-free receipt snapshots for crash-safe transfer recovery.

Writes receipt snapshots through same-directory atomic replacement.

Runs declared, value-safe transfer jobs.

Describes a value-free request to create a transfer plan.

Describes a dry-run or mutation-gated transfer apply request.

Wraps the display-safe result returned after plan creation.

Defines the versioned endpoint and named-job configuration authorization boundary.

Declares one named provider endpoint without embedding credential values.

Chooses a Google credential acquisition mode without carrying raw credentials.

Declares one reviewed, direction-specific transfer job.

Maps one logical LocalSecrets key to explicit provider resources.

Persists an expiring, value-free plan bound to all safety-relevant fields.

Captures one canonical, value-free plan row and its destination precondition.

Reports one value-free row outcome.

Aggregates ordered value-free plan or apply results.

Provides the durable, value-free apply journal and resume evidence.

Provides the discoverable root for AppSurface durable deployment commands.

Provides the discoverable root for explicit durable schema operations.

Prints installed and required durable schema versions without mutation.

Generates deterministic SQL for pending numbered migrations without opening a database connection.

Applies pending migrations through an explicitly configured migration-owner connection.

Fails noninteractively unless the installed schema supports this runtime's readers and writers.

Shared connection-source option and safety behavior for durable schema commands.

Supplies the secret-safe connection source and bounded execution shared only by online schema commands.

Testable CLI boundary over the PostgreSQL schema manager.

Production CLI adapter that creates and disposes a short-lived Npgsql data source per online command.

CLI-safe schema compatibility projection.

CLI-safe schema apply projection.

Renders stable, secret-safe schema diagnostics.

Writes generated scripts with atomic publication and explicit overwrite protection.

Reads an HTTP response body without retaining more than a caller-provided byte limit.

Captures the bounded result of one HTTP response-body read.

Coordinates AppSurface-owned remote-to-local transfers without persisting secret values.

Validates fixed-length lowercase hexadecimal transfer identities.

Provides deterministic coordinator failure injection for internal tests.

Describes the captured local precondition without exposing local values.