@smartergpt/lexrunner 1.0.0

package/TEST_INFRASTRUCTURE_ASSESSMENT.md

@@ -0,0 +1,225 @@
+# Test Infrastructure Improvements - Assessment
+
+**Issue**: #6 - LPR-E-006: Test Infrastructure Improvements  
+**Date**: 2026-01-01  
+**Status**: ✅ All Core Requirements Met
+
+## Executive Summary
+
+All primary acceptance criteria for test infrastructure improvements have been **successfully implemented and verified**. The issue was broken down into sub-issues #300 (fixtures) and #301 (benchmarks), but the work was actually completed before those issues were created.
+
+## Acceptance Criteria Status
+
+### ✅ Shared Test Fixture Library with Realistic Scenarios
+
+**Location**: `tests/fixtures/`
+
+**Implementation**:
+
+- Comprehensive fixture library with organized structure
+- 11 plan fixtures (simple, linear, diamond, complex, wide parallel, deep chain, etc.)
+- 7 invalid plan fixtures for error testing (cycles, unknown deps, orphans, etc.)
+- PR fixtures with factory functions (basic, with dependencies, chains, diamonds)
+- Gate fixtures (configs and results for various scenarios)
+- Scenario fixtures for end-to-end testing
+- Utility fixtures (temp directories, mock GitHub, cleanup)
+
+**Quality**:
+
+- ✅ 38 validation tests (all passing)
+- ✅ 400+ lines of comprehensive documentation
+- ✅ Full TypeScript support with strict typing
+- ✅ Deterministic fixtures (no randomness)
+- ✅ Cross-platform compatible
+
+**Evidence**:
+
+```bash
+npm test -- tests/fixtures/fixtures.spec.ts
+# Result: 38 tests passed
+```
+
+### ✅ Performance Regression Test Suite
+
+**Location**: `tests/benchmarks/`
+
+**Implementation**:
+
+- Benchmark infrastructure with Vitest
+- Core algorithm benchmarks:
+  - Topological sort (10, 50, 100, 500 nodes)
+  - Plan parsing (small, medium, large)
+  - Dependency resolution (simple, complex, cross-repo)
+- I/O operation benchmarks:
+  - File operations
+  - Git operations
+- End-to-end workflow benchmarks:
+  - Complete plan generation workflows
+  - Different dependency patterns
+  - Cached vs uncached performance
+
+**Quality**:
+
+- ✅ Baseline management system (`baselines/baseline.json`)
+- ✅ CI integration scripts (`npm run benchmark:ci`)
+- ✅ Performance targets documented
+- ✅ JSON and Markdown report generation
+- ✅ All benchmarks running successfully
+
+**Evidence**:
+
+```bash
+npm run benchmark
+# Result: All benchmarks complete, performance within targets
+```
+
+### ✅ Mock GitHub API Server for Deterministic Integration Tests
+
+**Location**: `tests/fixtures/utils/mockGitHub.ts`
+
+**Implementation**:
+The requirement for a "Mock GitHub API server" has been **implemented using a superior approach**: dependency injection with mock objects rather than a separate server process.
+
+**Mock Types Available**:
+
+1. **Basic Mock** (`createMockGitHub`): Standard mock with fixture PRs
+2. **Error Mock** (`createErrorMock`): Simulates API errors
+3. **Rate-Limited Mock** (`createRateLimitedMock`): Tests rate limit handling
+4. **Slow Mock** (`createSlowMock`): Tests timeout scenarios
+
+**Supported Endpoints**:
+
+- `pulls.list` - List pull requests
+- `pulls.get` - Get PR details
+- `pulls.listFiles` - Get PR files
+- `issues.listLabelsOnIssue` - Get issue labels
+- `issues.addLabels` - Add labels (no-op)
+
+**Quality**:
+
+- ✅ 114 GitHub-related tests passing
+- ✅ Full type safety with TypeScript
+- ✅ Deterministic responses
+- ✅ Easy to extend with additional endpoints
+- ✅ Used extensively across test suite
+
+**Evidence**:
+
+```bash
+npm test -- tests/github
+# Result: 8 test files passed, 114 tests passed
+```
+
+**Rationale for Mock Objects vs Mock Server**:
+
+1. **Performance**: No network overhead, even locally
+2. **Simplicity**: Easier to set up and tear down
+3. **Maintainability**: Changes are localized to mock files
+4. **Determinism**: Guaranteed consistent responses
+5. **Developer Experience**: No additional processes to manage
+
+### ⏸️ Deferred Items
+
+The following items were explicitly deferred per issue comments:
+
+1. **Parallel E2E Test Execution with Proper Isolation**
+   - Status: Deferred
+   - Reason: Needs test infrastructure foundation first
+   - Note: Worker pools already implemented for parallel processing
+
+2. **Test Report Aggregation and Trending**
+   - Status: Covered by sub-issue #301
+   - Note: Basic reporting exists (JSON/Markdown outputs)
+
+## Verification Results
+
+### Build & Type Safety
+
+```bash
+npm run typecheck
+# ✅ PASS: No TypeScript errors
+```
+
+### Test Suite
+
+```bash
+npm test -- tests/fixtures/fixtures.spec.ts
+# ✅ PASS: 38 fixture tests passed
+
+npm test -- tests/github
+# ✅ PASS: 114 GitHub integration tests passed
+
+npm run benchmark
+# ✅ PASS: All benchmarks completed successfully
+```
+
+### Code Quality
+
+- ✅ All fixtures pass schema validation
+- ✅ No TypeScript errors
+- ✅ Deterministic test results
+- ✅ Cross-platform compatibility
+
+## File Inventory
+
+### Fixture Library (20 files, ~83KB)
+
+- `tests/fixtures/README.md` (8.5KB documentation)
+- `tests/fixtures/index.ts` (6.2KB exports)
+- `tests/fixtures/plans/*.ts` (4 files, 10.5KB)
+- `tests/fixtures/invalid/plans.ts` (3.2KB)
+- `tests/fixtures/prs/*.ts` (2 files, 7.9KB)
+- `tests/fixtures/gates/*.ts` (2 files, 8.5KB)
+- `tests/fixtures/utils/*.ts` (3 files, 10.5KB)
+- `tests/fixtures/scenarios/*.ts` (2 files, 13KB)
+- `tests/fixtures/fixtures.spec.ts` (10KB, 38 tests)
+- `tests/fixtures-usage-examples.spec.ts` (10KB, 20 tests)
+- `tests/mergeOrder-with-fixtures.spec.ts` (7.2KB, 16 tests)
+
+### Benchmark Infrastructure (9 files)
+
+- `tests/benchmarks/README.md` (3KB documentation)
+- `tests/benchmarks/index.ts` (1.2KB)
+- `tests/benchmarks/core/*.bench.ts` (3 files)
+- `tests/benchmarks/io/*.bench.ts` (2 files)
+- `tests/benchmarks/workflows/*.bench.ts` (1 file)
+- `tests/benchmarks/utils/*.ts` (2 files)
+- `tests/benchmarks/baselines/baseline.json`
+
+### Related Files
+
+- `vitest.benchmark.config.ts` (Benchmark configuration)
+- `tests/performance.spec.ts` (Performance monitoring tests)
+- `FIXTURE_LIBRARY_SUMMARY.md` (Implementation summary)
+
+## Recommendations
+
+### 1. Documentation
+
+- ✅ Comprehensive README files exist
+- ✅ Usage examples provided
+- ✅ Migration guides included
+
+### 2. Maintenance
+
+- Monitor baseline performance metrics
+- Update fixtures as new patterns emerge
+- Expand mock GitHub endpoints if needed
+
+### 3. Future Enhancements (Low Priority)
+
+- Additional mock endpoints if new GitHub API calls are added
+- Enhanced reporting dashboard (if #301 requires it)
+- Parallel E2E orchestration (if undeferred)
+
+## Conclusion
+
+**All core acceptance criteria have been met**:
+
+- ✅ Shared test fixture library with realistic scenarios
+- ✅ Performance regression test suite
+- ✅ Mock GitHub API for deterministic integration tests
+
+The implementation is high-quality, well-tested, well-documented, and already integrated into the main branch. The mock object approach for GitHub API testing is superior to a mock server for the use cases in this codebase.
+
+**Recommendation**: This issue can be **closed as complete**. Any remaining work from deferred items or sub-issues should be tracked separately.

package/bootstrap-lexrunner.sh

@@ -0,0 +1,396 @@
+#!/usr/bin/env bash
+#
+# bootstrap-lexrunner.sh
+# Scaffolds a new repo for the Lex-PR Runner (CLI + MCP adapter) with .smartergpt layout.
+# Safe writer, idempotent-ish, SSH-first remotes, and tabs in editors by default.
+#
+# Usage:
+#   bash bootstrap-lexrunner.sh --dir lexrunner [--remote git@github.com:you/lexrunner.git] [--no-gh]
+#   bash bootstrap-lexrunner.sh --help
+#
+set -Eeuo pipefail
+
+# ---- tiny logger ----
+c_bold="$(tput bold 2>/dev/null || true)"; c_dim="$(tput dim 2>/dev/null || true)"; c_reset="$(tput sgr0 2>/dev/null || true)"
+log() { printf "%s%s%s\n" "${c_bold}" "$*" "${c_reset}"; }
+note() { printf "%s•%s %s\n" "${c_dim}" "${c_reset}" "$*"; }
+die() { printf "✖ %s\n" "$*" >&2; exit 1; }
+
+# ---- defaults ----
+DIR="lexrunner"
+NAME="lexrunner"
+REMOTE=""
+USE_GH=1           # 1 = try to create remote via gh if REMOTE empty; 0 = do not
+PRIVATE=1          # default private if gh creates
+PKG_MGR=""         # auto-detect: pnpm > npm
+INSTALL_DEPS=1     # run install step
+INIT_COMMIT=1      # make initial commit
+BRANCH="main"
+
+# ---- args ----
+print_help() {
+cat <<EOF
+Bootstrap a new Lex-PR Runner repository.
+
+Options:
+  --dir DIR             Target directory (default: ${DIR})
+  --name NAME           Package/repo name (default: ${NAME})
+  --remote SSH_URL      Set git remote 'origin' to this SSH URL (default: none)
+  --no-gh               Do not call 'gh repo create' (default: will attempt if no --remote)
+  --public              If 'gh' creates, make the repo public (default: private)
+  --pkg pnpm|npm        Force package manager (default: auto-detect pnpm > npm)
+  --no-install          Skip dependency installation
+  --no-commit           Skip initial commit
+  --branch NAME         Default branch name (default: ${BRANCH})
+  -h|--help             Show this help
+EOF
+}
+while [[ $# -gt 0 ]]; do
+  case "$1" in
+    --dir) DIR="$2"; shift 2;;
+    --name) NAME="$2"; shift 2;;
+    --remote) REMOTE="$2"; shift 2;;
+    --no-gh) USE_GH=0; shift;;
+    --public) PRIVATE=0; shift;;
+    --pkg) PKG_MGR="$2"; shift 2;;
+    --no-install) INSTALL_DEPS=0; shift;;
+    --no-commit) INIT_COMMIT=0; shift;;
+    --branch) BRANCH="$2"; shift 2;;
+    -h|--help) print_help; exit 0;;
+    *) die "Unknown arg: $1";;
+  esac
+done
+
+# ---- prereqs & env ----
+have() { command -v "$1" >/dev/null 2>&1; }
+[[ -z "${PKG_MGR}" ]] && { if have pnpm; then PKG_MGR="pnpm"; elif have npm; then PKG_MGR="npm"; else PKG_MGR=""; fi; }
+
+log "Scaffolding ${NAME} in ${DIR}"
+note "Package manager: ${PKG_MGR:-'(none found — will not install)'}"
+
+# ---- safe write helper ----
+# write_file <path> <<'EOF' ... EOF
+write_file() {
+  local dest="$1"; shift || true
+  local dir; dir="$(dirname "$dest")"
+  mkdir -p "$dir"
+  umask 022
+  local tmp; tmp="$(mktemp "${dest}.XXXXXX.tmp")"
+  # shellcheck disable=SC2094
+  cat > "$tmp"
+  mv -f "$tmp" "$dest"
+}
+
+# ---- create base dirs ----
+mkdir -p "${DIR}"
+cd "${DIR}"
+
+# ---- git init ----
+if [[ ! -d .git ]]; then
+  git init -b "${BRANCH}" >/dev/null
+  note "Initialized git repo (branch: ${BRANCH})"
+else
+  note ".git exists; leaving as-is"
+fi
+
+# ---- .gitignore ----
+write_file ".gitignore" <<'EOF'
+node_modules/
+dist/
+coverage/
+.env
+.smartergpt/cache/
+.smartergpt/runner/logs/
+.smartergpt/runner/results/
+.smartergpt/runner/stage/
+.DS_Store
+*.log
+EOF
+
+# ---- .editorconfig (tabs, no trailing spaces) ----
+write_file ".editorconfig" <<'EOF'
+root = true
+
+[*]
+indent_style = tab
+indent_size = 4
+end_of_line = lf
+charset = utf-8
+trim_trailing_whitespace = true
+insert_final_newline = true
+EOF
+
+# ---- LICENSE (MIT) ----
+year="$(date +%Y)"
+user_name="$(git config user.name || echo 'Your Name')"
+write_file "LICENSE" <<EOF
+MIT License
+
+Copyright (c) ${year} ${user_name}
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+EOF
+
+# ---- README ----
+write_file "README.md" <<EOF
+# ${NAME}
+
+**Lex-PR Runner** — fan-out PRs, compute a merge pyramid, run local gates, and **weave** merges cleanly.
+- CLI: \`lex-pr plan|run|merge|doctor|format|ci-replay\`
+- MCP server: exposes tools (\`plan.create\`, \`gates.run\`, \`merge.apply\`) and resources under \`.smartergpt/runner/\`.
+
+## Quick start
+\`\`\`bash
+# dev
+${PKG_MGR:-npm} run dev
+
+# run CLI (ts)
+${PKG_MGR:-npm} run cli -- schema validate plan.json
+${PKG_MGR:-npm} run cli -- merge-order plan.json
+${PKG_MGR:-npm} run cli -- gate plan.json
+${PKG_MGR:-npm} run cli -- merge plan.json --dry-run
+\`\`\`
+
+## Project layout
+- \`src/core\`: planner, gates runner, weave strategies
+- \`src/cli.ts\`: human CLI (Commander)
+- \`src/mcp/server.ts\`: MCP tool/resource surface (adapter)
+- \`.smartergpt/\`: canonical inputs + runner artifacts
+EOF
+
+# ---- package.json ----
+write_file "package.json" <<EOF
+{
+	"name": "${NAME}",
+	"version": "0.1.0",
+	"private": true,
+	"type": "module",
+	"bin": {
+		"lex-pr": "dist/cli.js"
+	},
+	"scripts": {
+		"dev": "tsx watch src/cli.ts",
+		"cli": "tsx src/cli.ts",
+		"mcp": "tsx src/mcp/server.ts",
+		"build": "tsup src/cli.ts --format esm,cjs --dts --out-dir dist && tsup src/mcp/server.ts --format esm,cjs --dts --out-dir dist",
+		"lint": "eslint . --ext .ts",
+		"typecheck": "tsc -p tsconfig.json"
+	},
+	"dependencies": {
+		"chalk": "^5.3.0",
+		"commander": "^12.0.0",
+		"execa": "^9.2.0",
+		"fs-extra": "^11.2.0",
+		"simple-git": "^3.24.0",
+		"yaml": "^2.6.0",
+		"zod": "^3.23.8"
+	},
+	"devDependencies": {
+		"@types/node": "^20.12.12",
+		"eslint": "^9.10.0",
+		"tsx": "^4.19.0",
+		"tsup": "^8.1.0",
+		"typescript": "^5.6.3"
+	}
+}
+EOF
+
+# ---- tsconfig.json ----
+write_file "tsconfig.json" <<'EOF'
+{
+	"compilerOptions": {
+		"target": "ES2022",
+		"module": "ES2022",
+		"moduleResolution": "Bundler",
+		"outDir": "dist",
+		"rootDir": "src",
+		"strict": true,
+		"esModuleInterop": true,
+		"skipLibCheck": true,
+		"noEmit": true
+	},
+	"include": ["src"]
+}
+EOF
+
+# ---- src stubs ----
+write_file "src/core/plan.ts" <<'EOF'
+import { z } from "zod";
+
+export const PlanItem = z.object({
+	id: z.number(),
+	branch: z.string(),
+	sha: z.string().optional(),
+	needs: z.number().array().default([]),
+	strategy: z.enum(["rebase-weave", "merge-weave", "squash-weave"]).default("rebase-weave")
+});
+export type PlanItem = z.infer<typeof PlanItem>;
+
+export const Plan = z.object({
+	target: z.string().default("main"),
+	items: z.array(PlanItem)
+});
+export type Plan = z.infer<typeof Plan>;
+
+export async function createPlan(): Promise<Plan> {
+	// TODO: read .smartergpt/stack.yml if present; otherwise combine scope.yml + deps.yml + PR metadata.
+	// For now, return a minimal placeholder plan.
+	return {
+		target: "main",
+		items: []
+	};
+}
+EOF
+
+write_file "src/cli.ts" <<'EOF'
+#!/usr/bin/env node
+import { Command } from "commander";
+import { createPlan } from "./core/plan.js";
+import * as fs from "fs";
+import * as path from "path";
+
+const program = new Command();
+program.name("lex-pr").description("Lex-PR Runner CLI").version("0.1.0");
+
+program
+	.command("plan")
+	.description("Compute merge pyramid and freeze plan artifacts")
+	.option("--out <dir>", "Artifacts output dir", ".smartergpt/runner")
+	.action(async (opts) => {
+		const plan = await createPlan();
+		const outDir = opts.out as string;
+		fs.mkdirSync(outDir, { recursive: true });
+		const planPath = path.join(outDir, "plan.json");
+		fs.writeFileSync(planPath, JSON.stringify(plan, null, 2));
+		console.log(`Wrote ${planPath}`);
+	});
+
+program
+	.command("doctor")
+	.description("Environment and config sanity checks")
+	.action(async () => {
+		console.log("doctor: TODO — check git, node, package manager, and .smartergpt/*");
+	});
+
+program.parseAsync(process.argv);
+EOF
+
+write_file "src/mcp/server.ts" <<'EOF'
+/**
+ * MCP server adapter (skeleton).
+ * Expose tools:
+ *  - plan.create
+ *  - gates.run
+ *  - merge.apply
+ * Expose resources:
+ *  - .smartergpt/runner/** (plan.json, results, logs, snapshot.md)
+ *
+ * TODO: Implement using your chosen MCP SDK.
+ */
+console.log("MCP server stub — implement with your preferred MCP SDK.");
+EOF
+
+# ---- .smartergpt canonical inputs ----
+mkdir -p ".smartergpt/runner" ".smartergpt/cache"
+
+write_file ".smartergpt/intent.md" <<'EOF'
+Ship initial Lex-PR Runner scaffold: plan skeleton, CLI, MCP stub, canonical files, and weave philosophy.
+EOF
+
+write_file ".smartergpt/scope.yml" <<'EOF'
+version: 1
+target: main
+sources:
+  - query: "is:open label:stack:*"
+selectors:
+  include_labels: ["stack:*"]
+  exclude_labels: ["WIP", "do-not-merge"]
+defaults:
+  strategy: rebase-weave
+  base: main
+pin_commits: false
+EOF
+
+write_file ".smartergpt/deps.yml" <<'EOF'
+version: 1
+depends_on: []
+strategies: {}
+EOF
+
+write_file ".smartergpt/stack.yml" <<'EOF'
+version: 1
+target: main
+prs: []
+EOF
+
+write_file ".smartergpt/gates.yml" <<'EOF'
+version: 1
+levels:
+  default:
+    - name: lint
+      run: "npm run lint"
+    - name: typecheck
+      run: "npm run typecheck"
+    - name: unit
+      run: "npm test"
+EOF
+
+# ---- install deps ----
+if [[ ${INSTALL_DEPS} -eq 1 ]]; then
+  if [[ -n "${PKG_MGR}" ]]; then
+    log "Installing dependencies (${PKG_MGR})"
+    if [[ "${PKG_MGR}" == "pnpm" ]]; then
+      pnpm install
+    else
+      npm install
+    fi
+  else
+    note "No package manager detected; skipping install."
+  fi
+fi
+
+# ---- git add/commit ----
+git add -A
+if [[ ${INIT_COMMIT} -eq 1 ]]; then
+  if git diff --cached --quiet; then
+    note "Nothing to commit."
+  else
+    git commit -m "Init lexrunner scaffold" >/dev/null || true
+    note "Committed initial scaffold."
+  fi
+fi
+
+# ---- remote setup ----
+if [[ -n "${REMOTE}" ]]; then
+  git remote remove origin >/dev/null 2>&1 || true
+  git remote add origin "${REMOTE}"
+  note "Set origin to ${REMOTE}"
+elif [[ ${USE_GH} -eq 1 ]]; then
+  if have gh; then
+    vis="private"
+    [[ ${PRIVATE} -eq 0 ]] && vis="public"
+    gh repo create "${NAME}" --${vis} --source=. --remote=origin --push >/dev/null || note "gh repo create skipped or failed."
+    note "Created repo via gh (${vis})."
+  else
+    note "gh not found; skipping remote creation."
+  fi
+fi
+
+log "Done. Try:"
+echo "  cd ${DIR} && ${PKG_MGR:-npm} run cli -- plan"

package/dist/api-7H7SJZIX.js

@@ -0,0 +1,15 @@
+import {
+  GitHubAPI,
+  GitHubAPIError,
+  createGitHubAPI,
+  extractLabelName
+} from "./chunk-U5MMENCP.js";
+import "./chunk-6A4IE3TI.js";
+import "./chunk-UHFMFO54.js";
+import "./chunk-2ESYSVXG.js";
+export {
+  GitHubAPI,
+  GitHubAPIError,
+  createGitHubAPI,
+  extractLabelName
+};

package/dist/api-U3X2WA6D.js

@@ -0,0 +1,15 @@
+import {
+  GitHubAPI,
+  GitHubAPIError,
+  createGitHubAPI,
+  extractLabelName
+} from "./chunk-3DU2DWUP.js";
+import "./chunk-6A4IE3TI.js";
+import "./chunk-UHFMFO54.js";
+import "./chunk-2ESYSVXG.js";
+export {
+  GitHubAPI,
+  GitHubAPIError,
+  createGitHubAPI,
+  extractLabelName
+};

package/dist/audit-2TZ2LU72.js

@@ -0,0 +1,60 @@
+import {
+  AUDIT_PROFILES,
+  AuditEmitter,
+  DEFAULT_REDACT_REGEX,
+  EVENT_TYPES,
+  STRICT_REDACT_REGEX,
+  buildContext,
+  discoverSidecarFiles,
+  emitEvent,
+  enrichSidecarEvent,
+  finalizeAudit,
+  generateManifest,
+  getProfileConfig,
+  hashPath,
+  ingestSidecarFiles,
+  initAuditEmitter,
+  markSidecarProcessed,
+  mergeProfileConfig,
+  readSidecarFile,
+  redactArgv,
+  redactObject,
+  redactSecrets,
+  sanitizeEnv,
+  sanitizeFileContent,
+  writeManifest
+} from "./chunk-GTP4OHD7.js";
+import {
+  generateSARIF,
+  writeSARIF
+} from "./chunk-6KK5JFFE.js";
+import "./chunk-55VWJYZY.js";
+import "./chunk-2ESYSVXG.js";
+export {
+  AUDIT_PROFILES,
+  AuditEmitter,
+  DEFAULT_REDACT_REGEX,
+  EVENT_TYPES,
+  STRICT_REDACT_REGEX,
+  buildContext,
+  discoverSidecarFiles,
+  emitEvent,
+  enrichSidecarEvent,
+  finalizeAudit,
+  generateManifest,
+  generateSARIF,
+  getProfileConfig,
+  hashPath,
+  ingestSidecarFiles,
+  initAuditEmitter,
+  markSidecarProcessed,
+  mergeProfileConfig,
+  readSidecarFile,
+  redactArgv,
+  redactObject,
+  redactSecrets,
+  sanitizeEnv,
+  sanitizeFileContent,
+  writeManifest,
+  writeSARIF
+};