Release

Generates canonical annotated-tag trailers from the prepared artifacts at HEAD.

Resolves and validates the tag-bound tagged projection for inspect and publish.

Recomputes the v2 subject after a maintainer or workflow supplies catalog-bound docs archive fields.

Adapts already-parsed v2 docs archive fields for the existing archive gate; this is not JSON deserialization.

Runs command logic with release diagnostic rendering.

Creates service objects for the resolved repository root.

Resolves the command tag, when relevant.

Resolves the GitHub Actions output path, when relevant.

Resolves the AppSurface Docs version catalog path, when the command supports stable docs evidence verification.

Resolves the trusted release root path used to interpret docs catalog exact-tree paths.

Resolves the branch name used for publish-time reachability and source workflow checks.

Writes the rendered command report to stdout and to the optional report path.

Resets the compact Unreleased ledger and inserts a tagged changelog section after it.

Runs a process and captures stdout and stderr.

Gets today's UTC date.

Confirms that a V2 manifest attests to exactly the release surface declared by the package index.

Verifies the repository-owned living-note layout before generic entry composition begins.

Removes reset-only template bullets directly before their canonical entry markers.

Converts the living unreleased note into a tagged release note.

Creates the next-cycle unreleased proof artifact.

Builds the tree-local pointer used by coordinated package and documentation links.

Gets the absolute path for a release note file.

Gets the absolute path for a release note sidecar file.

Gets the absolute path for a release manifest file.

Gets the absolute path for a release evidence bundle file.

Resolves a repository-relative path and verifies that the result stays inside the repository root.

Formats an absolute path as a slash-normalized repository-relative path.

Determines whether a path is under the supplied root.

Validates that the diff contains the versioned release artifacts, frozen current pointer, changelog, and next-cycle files for version .

Parses tab-delimited output from git diff --name-status --find-renames .

Parses a release version and rejects leading-v tags, build metadata, and invalid SemVer shapes.

Tries to parse a SemVer value without producing a command-line diagnostic.

Compares two versions with SemVer 2.0 precedence.

Launches the release CLI with process IO streams.

Runs the release CLI against supplied IO streams and an explicit working directory.

Renders the exact trailing message block accepted by the resolver.

Parses a Git tag object and validates its final AppSurface release trailer block.

Reads the tagger timestamp from a raw annotated Git tag object.

Generates release files or, in dry-run mode, returns the planned edits.

Removes one consumed entry without deleting a concurrently replaced file.

Creates a serializable diagnostic record.

Renders the full-diff identity, changes, and structured diagnostics without allowing diff content to alter the table shape.

Creates the output directory securely and atomically replaces the target projection.

Runs a callback after the target directory is safely opened and before the temporary file is created.

Runs a callback after the temporary output file is created and before its content is written.

Forces Unix temporary-file permission hardening to fail with a specified native error code.

Canonicalizes fixed macOS temporary-directory aliases before no-follow traversal.

Produces the release docs publication plan and all local artifacts the publish workflow transports.

Writes GitHub Actions outputs for the generated publication plan.

Renders a check report.

Renders a prepare report.

Loads a package index summary from YAML.

Parses a package-index document into the release-owned public package summary.

Validates the stable release docs archive contract using command-supplied catalog inputs.

Validates that a physical directory candidate stays below an ordinary trusted root without crossing reparse segments.

Resolves a catalog exactTreePath into a physical path beneath the trusted release root.

Creates the physical-path coverage set for a release manifest under the filesystem's casing rules.

Resolves physical filesystem casing behavior without writing probe files into an immutable archive.

Overrides release docs archive filesystem inspection for the current async test flow.

Returns whether the directory currently exists.

Reads directory attributes, throwing the same filesystem exceptions as FileSystemInfo.Attributes .

Enumerates immediate entries in a directory.

Reads attributes for a file or directory entry discovered during archive traversal.

Returns whether the file currently exists.

Reads file attributes, throwing the same filesystem exceptions as FileSystemInfo.Attributes .

Loads sidecar metadata from YAML.

Converts unreleased metadata into a committed prepared-release sidecar.

Parses a sidecar YAML payload that was read from a tag or another explicit source.

Ensures that this sidecar is an explicit prepared artifact for the requested version.

Creates the transient tagged sidecar projection after a resolver has verified the annotated tag.

Creates reset unreleased metadata for the next release cycle.

Builds a draft release evidence bundle for release preparation.

Builds schema-v2 evidence for a release whose package links use the frozen coordinated current pointer.

Validates a checked-in release evidence bundle in the current worktree.

Validates release evidence read from an annotated tag.

Serializes a schema-v2 coordinated release evidence bundle.

Determines whether a raw evidence document declares schema v2 without deserializing it as a v1 object.

Builds the initial pointer used before the repository has a reachable coordinated tag.

Builds the canonical pointer for a tagged coordinated release.

Validates canonical pointer bytes and returns its optional referenced tag version.

Creates an error diagnostic.

Creates a warning diagnostic.

Creates the diagnostic emitted when append-only unreleased entries cannot be composed.

Renders the diagnostic envelope for CLI stderr.

Runs release commands through the shared AppSurface command-service primitive.

Verifies a release-preparation diff from an explicit base branch or ref to HEAD.

Strictly parses NUL-delimited git diff --name-status -z --find-renames output.

Appends diagnostics when the complete diff does not contain the exact artifact statuses required for a versioned release.

Validates a parsed PackageIndex witness against the complete diff and appends diagnostics for every provenance mismatch.

Validates an existing annotated tag and extracts release notes from the tag commit.

Writes publish outputs to a GitHub Actions output file when requested.

Runs local release readiness checks.