Release

Loads sidecar metadata from YAML.

Converts unreleased metadata into a committed prepared-release sidecar.

Parses a sidecar YAML payload that was read from a tag or another explicit source.

Ensures that this sidecar is an explicit prepared artifact for the requested version.

Creates the transient tagged sidecar projection after a resolver has verified the annotated tag.

Creates reset unreleased metadata for the next release cycle.

Renders the exact trailing message block accepted by the resolver.

Parses a Git tag object and validates its final AppSurface release trailer block.

Reads the tagger timestamp from a raw annotated Git tag object.

Gets the absolute path for a release note file.

Gets the absolute path for a release note sidecar file.

Gets the absolute path for a release manifest file.

Gets the absolute path for a release evidence bundle file.

Resolves a repository-relative path and verifies that the result stays inside the repository root.

Formats an absolute path as a slash-normalized repository-relative path.

Determines whether a path is under the supplied root.

Generates release files or, in dry-run mode, returns the planned edits.

Recomputes the v2 subject after a maintainer or workflow supplies catalog-bound docs archive fields.

Adapts already-parsed v2 docs archive fields for the existing archive gate; this is not JSON deserialization.

Resets the compact Unreleased ledger and inserts a tagged changelog section after it.

Validates the stable release docs archive contract using command-supplied catalog inputs.

Validates that a physical directory candidate stays below an ordinary trusted root without crossing reparse segments.

Resolves a catalog exactTreePath into a physical path beneath the trusted release root.

Creates the physical-path coverage set for a release manifest under the filesystem's casing rules.

Resolves physical filesystem casing behavior without writing probe files into an immutable archive.

Overrides release docs archive filesystem inspection for the current async test flow.

Returns whether the directory currently exists.

Reads directory attributes, throwing the same filesystem exceptions as FileSystemInfo.Attributes.

Enumerates immediate entries in a directory.

Reads attributes for a file or directory entry discovered during archive traversal.

Returns whether the file currently exists.

Reads file attributes, throwing the same filesystem exceptions as FileSystemInfo.Attributes.

Runs a process and captures stdout and stderr.

Gets today's UTC date.

Creates an error diagnostic.

Creates a warning diagnostic.

Renders the diagnostic envelope for CLI stderr.

Runs local release readiness checks.

Runs release commands through the shared AppSurface command-service primitive.

Launches the release CLI with process IO streams.

Runs the release CLI against supplied IO streams and an explicit working directory.

Builds a draft release evidence bundle for release preparation.

Builds schema-v2 evidence for a release whose package links use the frozen coordinated current pointer.

Validates a checked-in release evidence bundle in the current worktree.

Validates release evidence read from an annotated tag.

Serializes a schema-v2 coordinated release evidence bundle.

Determines whether a raw evidence document declares schema v2 without deserializing it as a v1 object.

Parses a release version and rejects leading-v tags, build metadata, and invalid SemVer shapes.

Tries to parse a SemVer value without producing a command-line diagnostic.

Compares two versions with SemVer 2.0 precedence.

Produces the release docs publication plan and all local artifacts the publish workflow transports.

Writes GitHub Actions outputs for the generated publication plan.

Converts the living unreleased note into a tagged release note.

Creates the next-cycle unreleased proof artifact.

Builds the tree-local pointer used by coordinated package and documentation links.

Loads a package index summary from YAML.

Parses a package-index document into the release-owned public package summary.

Validates that the diff contains the versioned release artifacts, frozen current pointer, changelog, and next-cycle files for version.

Parses tab-delimited output from git diff --name-status --find-renames.

Runs command logic with release diagnostic rendering.

Creates service objects for the resolved repository root.

Resolves the command tag, when relevant.

Resolves the GitHub Actions output path, when relevant.

Resolves the AppSurface Docs version catalog path, when the command supports stable docs evidence verification.

Resolves the trusted release root path used to interpret docs catalog exact-tree paths.

Resolves the branch name used for publish-time reachability and source workflow checks.

Writes the rendered command report to stdout and to the optional report path.

Validates an existing annotated tag and extracts release notes from the tag commit.

Writes publish outputs to a GitHub Actions output file when requested.

Creates a serializable diagnostic record.

Builds the initial pointer used before the repository has a reachable coordinated tag.

Builds the canonical pointer for a tagged coordinated release.

Validates canonical pointer bytes and returns its optional referenced tag version.

Creates the output directory securely and atomically replaces the target projection.

Runs a callback after the target directory is safely opened and before the temporary file is created.

Runs a callback after the temporary output file is created and before its content is written.

Forces Unix temporary-file permission hardening to fail with a specified native error code.

Canonicalizes fixed macOS temporary-directory aliases before no-follow traversal.

Renders a check report.

Renders a prepare report.

Confirms that a V2 manifest attests to exactly the release surface declared by the package index.

Generates canonical annotated-tag trailers from the prepared artifacts at HEAD.

Resolves and validates the tag-bound tagged projection for inspect and publish.