PackageIndex

CLI entry point for generating or verifying the package chooser and maintainer readiness dashboard.

Parsed CLI options for a package-index command that may read and write package chooser and readiness dashboard outputs.

Resolved inputs for the read-only package release-preparation witness command.

Defines the exact parser and sanitizer identities approved for stable AppSurface Docs packages.

One approved stable Docs parser or sanitizer dependency identity.

Validates the bounded Cobertura contract used by the packaged default-collector consumer proof.

Manifest-bound raw report selected for the packaged default-collector proof.

Public-safe outcome of one semantic coverage artifact validation stage.

Bounded semantic facts retained by the package proof. These are intentionally not raw XML.

One coded package coverage proof failure.

Complete semantic default-collector proof state, including a selected raw artifact when selection succeeded.

Runs external commands for repository validation workflows.

Describes one external command invocation and the language to use when it fails.

Captured stdout and stderr from a successful command.

Process-backed command runner with timeout and failure cleanup.

Loads the redistributed package payload inventory used by verify-packages.

Repository-owned contract for redistributed package payload notice, audit, and generated evidence.

Third-party redistributed payload evidence that requires package notice coverage.

Audit evidence for package payloads that are generated-first-party or otherwise not third-party notice records.

Renders the finite package README release-guidance variants declared by the package manifest.

Describes one rendered package README policy region without changing the checked-in file.

Coordinates package artifact packing and validation without publishing to NuGet.

Request for package artifact packing and validation.

Resolves the checked-in package manifest into the exact package set that should be packed.

Ordered package set selected for artifact packing and validation.

One package selected for pack artifact production.

Safely recreates isolated package-consumer proof workspaces.

Runs external commands through CliWrap for protected package publishing and smoke-install workflows.

External command runner used by publish and smoke workflows when non-zero exit codes are meaningful results.

Command invocation for CliWrap-backed release automation.

Captured command result including non-zero exit codes.

Writes the machine-readable package artifact manifest consumed by protected publish jobs.

Reads and validates the artifact manifest written by the package artifact verifier.

Publishes a validated package artifact set to NuGet in manifest order.

Restores published public packages and verifies published .NET tools from a clean NuGet configuration after publish completes.

Renders protected publish outcomes for workflow artifacts.

Renders package smoke install outcomes for workflow artifacts.

Request for a protected NuGet package publish workflow.

Request for the post-publish smoke install and tool verification workflow.

Machine-readable artifact manifest that binds validated package artifacts to immutable hashes.

One package artifact selected from the checked-in package manifest.

Publish result for a coordinated package version.

Publish outcome for one package artifact.

Smoke install result for packages restored and tools verified after package publishing.

Smoke install outcome for one public package or tool.

Computes package artifact hashes for manifest generation and publish verification.

JSON serializer options shared by artifact manifest readers and writers.

Environment variables that make release automation quieter and deterministic.

Formats package publish decisions for machine-readable release artifacts.

Verifies that an artifact manifest still matches the checked-in package plan and validated artifacts.

Package artifact that has been matched to both the checked-in plan and artifact manifest.

Validates package artifacts against the resolved publish plan.

Renders package artifact validation results for workflow artifacts.

Ensures package versions used by release workflows are safe for NuGet identity.

Result of a successful package artifact validation run.

One validated package row in the artifact report.

One redistributed package payload evidence row rendered into the artifact validation report.

Metadata and payload facts inspected from one NuGet package artifact.

One dependency container preserved from a package nuspec.

One raw dependency occurrence preserved from a package nuspec.

Dependency-container facts collected from a package nuspec.

One stable Docs dependency-contract violation.

Tool command declarations found in one packaged DotnetToolSettings.xml file.

Informational version metadata read from a first-party assembly inside a package artifact.

Runs the pre-publish consumer proof for the packaged AppSurface CLI.

Verifies that the packed ForgeTrust.AppSurface.Cli works from a clean package-consumer project.

Provides a protected named-canary fixture through a loopback HTTP server.

Request for the packaged coverage CLI consumer proof.

Selected CLI artifact metadata captured before running the consumer proof.

Structured packaged coverage CLI proof report.

One external command in the packaged coverage CLI proof ledger.

One artifact expected from the packaged coverage CLI consumer proof.

Runtime paths shared across the packaged coverage CLI consumer proof.

Renders packaged coverage CLI consumer proof reports for package validation artifacts.

Runs the pre-publish restore proof for the packed AppSurface Docs package.

Proves that a clean package consumer resolves the packed Docs artifact and the reviewed stable parser and sanitizer graph.

Request for an isolated packed Docs consumer restore proof.

Identity and hash of the validated Docs artifact selected for consumer restore.

One resolved package identity verified in the generated consumer's assets graph.

Structural proof that the generated consumer resolved all required package identities.

One command in the packed Docs consumer proof ledger.

Structured evidence emitted by the packed Docs consumer proof.

Renders packed Docs consumer proof evidence for standalone and aggregate package reports.

Runtime paths and inputs shared by the packed Docs consumer proof.

Generates and verifies the manifest-backed package chooser markdown for the repository.

Describes one package chooser and readiness dashboard generation or verification request.

Generated markdown documents produced from one package index resolution pass.

Summarizes the managed package README work performed by PackageIndexGenerator.GenerateToFileAsync.

Couples one manifest row with the evaluated package metadata used to render the chooser.

Computes package-index readiness evidence for the maintainer dashboard without treating the dashboard as live publish proof.

Per-package readiness evidence rendered in the generated maintainer dashboard.

Summarizes the package gate coverage used by CI and local release checks.

Validates package release metadata, package-class invariants, and stale brand drift before packages are published.

Represents a package chooser generation or verification failure.

Contract for evaluating one discovered project into package metadata suitable for chooser rendering.

Evaluated package metadata used by the chooser renderer.

Discovers candidate projects that should be classified by the package chooser manifest.

Evaluates project metadata by invoking dotnet msbuild and reading JSON property output.

Loads the chooser manifest from YAML into strongly typed manifest models.

Root manifest model for the chooser YAML file.

One manifest row describing how a project should appear in the chooser.

Produces a deterministic, read-only description of generated package documentation for release-preparation review.

Immutable JSON contract emitted by ReleasePreparationWitnessBuilder.

One changed semantic source that authorizes specific generated package surfaces.

One generated package surface and the SHA-256 digest the canonical renderer expects at HEAD.

Renders the public-safe, versioned evidence companion for the packaged coverage proof.