Cli

Adapts the CliFx console to the private coverage-core writer boundary.

Validated, printable doctor intent. Connection values remain private to the invocation.

Fixed categories accepted by the version-one observation and output contract.

Bounded immutable observations captured on the single fenced database session.

Selected heartbeat facts only; a missing row is represented by Found=false and null row values.

Secret-free failure envelope. Only fixed categories may reach rendering.

Dedicated read-only operation; implementations do not register a Durable worker or mutate its store.

Shared execution and schema-v1 rendering for coverage storage commands.

Stable schema-v1 response envelope used by every command in this family.

Shows registered coverage storage status; this is also the bare storage-group default.

Shows the explicitly named coverage storage status.

Inspects a repository's coverage output with fixed time and entry bounds, without adopting files.

Previews history expiry, applying it only when explicitly requested with --apply.

Restores one verified archived run to a fresh output directory.

Pins or unpins a verified archived run so normal history expiry respects operator intent.

Removes the protection pin from a verified archived run.

Previews or explicitly creates a fresh private domain, preserving an unproven old domain in place.

Polls one protected AppSurface named-canary endpoint until it produces a terminal deployment decision.

Coordinates deterministic named-canary polling without hidden HTTP retries.

Performs one caller-owned delay in the polling state machine.

Uses the configured time provider for production polling delays.

Issues one named-canary HTTP request without following redirects.

Adapts the typed HTTP client to the polling workflow's bounded response contract.

Captures one bounded named-canary HTTP response.

Captures a parsed Retry-After header without retaining raw header text.

Parses the required named-canary compatibility core.

Represents the parsed safe fields required by the polling state machine.

Represents a protocol incompatibility without exposing response content.

Normalizes safe command options and resolves environment-sourced values.

Contains normalized request metadata and non-renderable environment-sourced values.

Contains one non-renderable custom HTTP header.

Represents a safe local command-input failure.

Represents one safe terminal polling result.

Renders one safe terminal result for a person or an automation client.

Appends a bounded, safe result table to a GitHub Actions step summary.

Writes bounded failure-first test results and best-effort slow-test diagnostic artifacts for coverage run .

Delegates stream operations while reporting positive byte counts from reads.

Written slow-test diagnostic artifact metadata.

Slow-test diagnostic report before overhead fields are finalized.

Project timing metadata included in slow-test diagnostics.

Best-effort parse result for one managed JUnit file.

Parsed JUnit test case timing and bounded failure evidence included in diagnostics.

Provides the discoverable root for AppSurface durable deployment commands.

Provides the discoverable root for explicit durable schema operations.

Prints installed and required durable schema versions without mutation.

Generates deterministic SQL for pending numbered migrations without opening a database connection.

Applies pending migrations through an explicitly configured migration-owner connection.

Verifies a complete reviewed role manifest and schema in one fenced, read-only snapshot.

Shared connection-source option and safety behavior for durable schema commands.

Supplies the secret-safe connection source and bounded execution shared only by online schema commands.

Testable CLI boundary over the PostgreSQL schema manager.

Production CLI adapter that creates and disposes a short-lived Npgsql data source per online command.

CLI-safe schema compatibility projection.

CLI-safe schema apply projection.

Renders stable, secret-safe schema diagnostics.

Writes generated scripts with atomic publication and explicit overwrite protection.

Validates doctor intent and keeps its resolved connection string private to one command invocation.

A fixed-category signal for invalid doctor arguments or selected environment values.

Classifies raw doctor argv before generic CLI parsing can echo malformed tokens.

Safe raw-argv doctor route decision produced before CLI normalization and startup-context creation.

Coordinates AppSurface-owned remote-to-local transfers without persisting secret values.

Validates fixed-length lowercase hexadecimal transfer identities.

Provides deterministic coordinator failure injection for internal tests.

Describes the captured local precondition without exposing local values.

Describes a local destination check without exposing local values.

Describes a guarded local write or recovery outcome.

Contains a stable, value-safe local coordinator failure.

Persists only transfer identity and state, never a secret value or a value-derived hash.

Loads one finite published bundle and passes only the remaining monotonic allowance to observation.

Reads an HTTP response body without retaining more than a caller-provided byte limit.

Captures the bounded result of one HTTP response-body read.

Writes the stable binding between one coverage-run project directory and the project that owns it.

Inspects one configured Durable store and runtime without changing the database.

Provides the discoverable root for AppSurface local secret commands.

Initializes or verifies a LocalSecrets namespace.

Writes a local secret value.

Verifies a local secret exists without printing its value.

Lists currently retrievable local secret names in a namespace.

Explicitly migrates readable legacy macOS LocalSecrets records into the current v2 Keychain namespace.

Migrates one exact stored LocalSecrets identifier to a strict logical destination key.

Inspects or explicitly retains/releases an unfinished file-backed exact-key migration.

Deletes one local secret.

Diagnoses LocalSecrets platform availability.

Shared options and helpers for local secret commands.

Shared options for commands that target one local secret key.

Captures normalized command state.

Internal CLI entry point that adds a scoped test seam around AppSurfaceCliApp .

Restores the previously active test override when disposed.

Represents the AppSurface CLI root module used to bootstrap command execution.

Previews AppSurface Docs for a local repository through the public appsurface docs command.

Previews AppSurface Docs for a local repository through the appsurface docs preview alias.

Exports AppSurface Docs for a local repository through the appsurface docs export command.

Verifies one catalog-pinned AppSurface Docs release archive without starting a web host.

Verifies AppSurface Docs harvest health for CI and release gates.

Shared implementation for AppSurface Docs preview commands.

Shared repository, routing, environment, and startup-timeout options for AppSurface docs commands.

Restores the previous process current directory when disposed.

Shared repository command options for AppSurface docs commands that expose strict harvest startup behavior.

Describes the AppSurface Docs host invocation produced by the CLI option translator.

Describes a one-shot AppSurface Docs static export request.

Describes a one-shot AppSurface Docs harvest-health verification request.

Result returned by the AppSurface Docs harvest-health verification runner.

Raw HTTP response returned by the AppSurface Docs harvest-health client seam.

Applies shared host options required by packaged AppSurface docs tooling.

Starts a AppSurface Docs host for CLI preview commands.

Starts the AppSurface Docs host and exports it to static files.

Loads the AppSurface Docs host service graph and verifies the redacted harvest-health response.

Reads the AppSurface Docs harvest-health JSON endpoint.

Builds and starts the AppSurface Docs host used by harvest-health verification.

Adapts the RazorWire static exporter behind a small AppSurface CLI test seam.

Adds AppSurface Docs-specific export graph state after the host starts and before RazorWire crawls it.

Production IAppSurfaceDocsHostRunner that delegates to the standalone AppSurface Docs web host.

Shared exception classification helpers used by command cleanup and best-effort diagnostics.

Reads a command-owned harvest summary from a started AppSurface Docs preview host.

Concise harvest summary emitted by the AppSurface Docs CLI preview command.

Production IAppSurfaceDocsHarvestSummaryReader that reads DocAggregator health.

Describes a preview AppSurface Docs host startup request.

Builds and starts the AppSurface Docs preview host.

Production IAppSurfaceDocsPreviewHostStarter that uses the AppSurface Docs standalone host builder.

Attempts to open the preview docs URL in the user's browser.

Describes the outcome of an attempted browser launch.

Browser launcher that uses the current operating system's conventional URL opener.

Runs the platform command that asks the operating system to open a browser URL.

CliWrap-backed IAppSurfaceDocsBrowserOpenCommandRunner implementation.

Resolves browser-facing URLs for AppSurface Docs preview hosts.

Production export runner that starts the standalone AppSurface Docs host in-process and exports it over real loopback HTTP.

Owns a startup cancellation source until timeout observation needs to transfer that ownership.

Production harvest-health HTTP client used by AppSurfaceDocsInProcessHealthVerifyRunner .

Production IAppSurfaceDocsHealthHostStarter that uses the AppSurface Docs standalone host builder.

Provides a fixed environment name to the standalone host builder during health verification startup.

Starts AppSurface Docs in-process and verifies the redacted harvest-health response over loopback HTTP.

Default AppSurface Docs export configurator that publishes docs route aliases into RazorWire's export graph and captures the frozen route manifest alongside the static output.

Test-seam configurator used when unit tests provide a fake host that does not contain AppSurface Docs services.

Builds and starts the in-process AppSurface Docs export host.

Production IAppSurfaceDocsExportHostStarter that uses the AppSurface Docs standalone host builder.

Provides a fixed environment name to the standalone host builder during export startup.

Production IRazorWireStaticExporter that delegates to RazorWire's ExportEngine .

Verifies that a running web app exposes AppSurface-compatible PWA install or push-readiness evidence.

Fetches verifier resources without automatically following redirects.

Adapts HttpClient to the verifier's bounded, redirect-aware fetch contract.

Captures one bounded HTTP response before verifier-managed redirect handling.

Represents schema-versioned PWA verification evidence written by the CLI.

Represents the schema-v3 report used only for explicitly requested push or combined PWA readiness verification.

Captures install observations embedded in a schema-v3 combined report.

Captures only server-known, privacy-safe push-readiness evidence.

Captures bounded shared-worker fetch evidence.

Captures bounded registration-helper discovery and fetch evidence.

Captures the safe VAPID identity contributed by the optional Push package.

Pairs schema-v3 push evidence with diagnostics collected while verifying it.

Holds validated readiness evidence or the sanitized unavailable state.

Represents one stable, structured PWA verification observation.

Normalizes the trusted origin, application path base, and real entry route used by one verification run.

Carries normalized CLI assertions into a PWA verification run.