ctxman 3.0.0 → 3.1.1

package/ctxman.js

@@ -10,227 +10,281 @@ import path from 'path';
 import TokenCalculator from './lib/analyzers/token-calculator.js';
 import GitIngestFormatter from './lib/formatters/gitingest-formatter.js';
 import TokenUtils from './lib/utils/token-utils.js';
+import { loadPolicy } from './lib/policy/policy.js';
+import { enforceExport, PolicyViolationError } from './lib/policy/enforce.js';
+import { recordExport } from './lib/policy/audit.js';
 
 /**
- * Generate GitIngest digest from token-analysis-report.json
+ * Apply the export policy of `projectRoot` to a digest built from a saved file list:
+ * denied files are dropped (the list may predate the policy) and the rest is checked
+ * @returns {{files: object[], audit: Function}} Remaining files, and a function that logs
+ *   the written digest
  */
-function generateDigestFromReport(reportPath) {
-    console.log('📄 Loading token analysis report...');
-
-    if (!fs.existsSync(reportPath)) {
-        console.error(`❌ Error: Report file not found: ${reportPath}`);
-        process.exit(1);
+function applyDigestPolicy(projectRoot, files, tokens, command) {
+  const policy = loadPolicy(projectRoot);
+  if (!policy.active) return { files, audit: () => {} };
+
+  const { kept, removed } = policy.filterFiles(files);
+  if (removed.length > 0) {
+    console.log(`🛡️  Removed ${removed.length} file(s) denied by the export policy`);
+  }
+  const event = {
+    command,
+    root: projectRoot,
+    format: 'gitingest',
+    files: kept,
+    tokens,
+    removedByPolicy: removed.length,
+  };
+  try {
+    enforceExport(policy, event);
+  } catch (error) {
+    if (error instanceof PolicyViolationError) {
+      recordExport(policy, { ...event, outcome: 'refused', violations: error.violations });
     }
+    throw error;
+  }
+
+  const audit = (digestPath, formatter) => {
+    if (!policy.audit.enabled) return;
+    const written = formatter.chunkFiles?.length ? formatter.chunkFiles : [digestPath];
+    recordExport(policy, {
+      ...event,
+      destination: digestPath,
+      outputFiles: written.length > 1 ? written : undefined,
+      redactions: formatter.redactions,
+      text: written.map((file) => fs.readFileSync(file)),
+    });
+  };
+  return { files: kept, audit };
+}
 
-    try {
-        const report = JSON.parse(fs.readFileSync(reportPath, 'utf8'));
-
-        if (!report.metadata || !report.summary || !report.files) {
-            console.error('❌ Error: Invalid report format. Missing required fields.');
-            process.exit(1);
-        }
-
-        const projectRoot = report.metadata.projectRoot || process.cwd();
-
-        console.log(`✅ Report loaded: ${report.files.length} files`);
-        console.log('📄 Generating GitIngest digest from report...\n');
-
-        const formatter = new GitIngestFormatter(
-            projectRoot,
-            report.summary,
-            report.files
-        );
+/**
+ * Generate GitIngest digest from token-analysis-report.json
+ */
+function generateDigestFromReport(reportPath) {
+  console.log('📄 Loading token analysis report...');
 
-        const digestPath = path.join(process.cwd(), 'digest.txt');
-        const digestSize = formatter.saveToFile(digestPath);
+  if (!fs.existsSync(reportPath)) {
+    console.error(`❌ Error: Report file not found: ${reportPath}`);
+    process.exit(1);
+  }
 
-        console.log(`💾 GitIngest digest saved to: digest.txt`);
-        console.log(`📊 Digest size: ${(digestSize / 1024).toFixed(1)} KB`);
-        console.log(`✨ Generated from: ${path.basename(reportPath)}`);
+  try {
+    const report = JSON.parse(fs.readFileSync(reportPath, 'utf8'));
 
-    } catch (error) {
-        console.error(`❌ Error processing report: ${error.message}`);
-        process.exit(1);
+    if (!report.metadata || !report.summary || !report.files) {
+      console.error('❌ Error: Invalid report format. Missing required fields.');
+      process.exit(1);
     }
+
+    const projectRoot = report.metadata.projectRoot || process.cwd();
+
+    console.log(`✅ Report loaded: ${report.files.length} files`);
+    console.log('📄 Generating GitIngest digest from report...\n');
+
+    const reportTokens = report.files.reduce((sum, file) => sum + (Number(file.tokens) || 0), 0);
+    const guarded = applyDigestPolicy(
+      projectRoot,
+      report.files,
+      reportTokens,
+      'cli --gitingest-from-report'
+    );
+    const formatter = new GitIngestFormatter(projectRoot, report.summary, guarded.files);
+
+    const digestPath = path.join(process.cwd(), 'digest.txt');
+    const digestSize = formatter.saveToFile(digestPath);
+    guarded.audit(digestPath, formatter);
+
+    console.log(`💾 GitIngest digest saved to: digest.txt`);
+    console.log(`📊 Digest size: ${(digestSize / 1024).toFixed(1)} KB`);
+    console.log(`✨ Generated from: ${path.basename(reportPath)}`);
+  } catch (error) {
+    console.error(`❌ Error processing report: ${error.message}`);
+    // 2: invalid policy file, 3: export refused by the policy
+    process.exit(error.exitCode ?? 1);
+  }
 }
 
 /**
  * Generate GitIngest digest from llm-context.json
  */
 function generateDigestFromContext(contextPath) {
-    console.log('📄 Loading LLM context file...');
+  console.log('📄 Loading LLM context file...');
 
-    if (!fs.existsSync(contextPath)) {
-        console.error(`❌ Error: Context file not found: ${contextPath}`);
-        process.exit(1);
-    }
+  if (!fs.existsSync(contextPath)) {
+    console.error(`❌ Error: Context file not found: ${contextPath}`);
+    process.exit(1);
+  }
 
-    try {
-        const context = JSON.parse(fs.readFileSync(contextPath, 'utf8'));
+  try {
+    const context = JSON.parse(fs.readFileSync(contextPath, 'utf8'));
 
-        if (!context.project || !context.paths) {
-            console.error('❌ Error: Invalid context format. Missing required fields.');
-            process.exit(1);
-        }
+    if (!context.project || !context.paths) {
+      console.error('❌ Error: Invalid context format. Missing required fields.');
+      process.exit(1);
+    }
 
-        console.log(`✅ Context loaded: ${context.project.totalFiles} files`);
-        console.log('📄 Generating GitIngest digest from context...\n');
-
-        // Extract files from context.paths structure
-        const files = [];
-        for (const [dirPath, fileNames] of Object.entries(context.paths)) {
-            for (const fileName of fileNames) {
-                const relativePath = dirPath === '/'
-                    ? fileName
-                    : `${dirPath}${fileName}`;
-
-                const fullPath = path.join(process.cwd(), relativePath);
-
-                if (fs.existsSync(fullPath)) {
-                    const stats = fs.statSync(fullPath);
-                    files.push({
-                        path: fullPath,
-                        relativePath: relativePath,
-                        sizeBytes: stats.size,
-                        tokens: 0,
-                        lines: 0
-                    });
-                }
-            }
+    console.log(`✅ Context loaded: ${context.project.totalFiles} files`);
+    console.log('📄 Generating GitIngest digest from context...\n');
+
+    // Extract files from context.paths structure
+    const files = [];
+    for (const [dirPath, fileNames] of Object.entries(context.paths)) {
+      for (const fileName of fileNames) {
+        const relativePath = dirPath === '/' ? fileName : `${dirPath}${fileName}`;
+
+        const fullPath = path.join(process.cwd(), relativePath);
+
+        if (fs.existsSync(fullPath)) {
+          const stats = fs.statSync(fullPath);
+          files.push({
+            path: fullPath,
+            relativePath: relativePath,
+            sizeBytes: stats.size,
+            tokens: 0,
+            lines: 0,
+          });
         }
+      }
+    }
 
-        console.log(`📁 Found ${files.length} accessible files`);
-
-        const stats = {
-            totalFiles: files.length,
-            totalTokens: context.project.totalTokens,
-            totalBytes: files.reduce((sum, f) => sum + f.sizeBytes, 0),
-            totalLines: 0
-        };
-
-        const formatter = new GitIngestFormatter(
-            process.cwd(),
-            stats,
-            files
-        );
-
-        const digestPath = path.join(process.cwd(), 'digest.txt');
-        const digestSize = formatter.saveToFile(digestPath);
+    console.log(`📁 Found ${files.length} accessible files`);
 
-        console.log(`💾 GitIngest digest saved to: digest.txt`);
-        console.log(`📊 Digest size: ${(digestSize / 1024).toFixed(1)} KB`);
-        console.log(`✨ Generated from: ${path.basename(contextPath)}`);
+    const stats = {
+      totalFiles: files.length,
+      totalTokens: context.project.totalTokens,
+      totalBytes: files.reduce((sum, f) => sum + f.sizeBytes, 0),
+      totalLines: 0,
+    };
 
-    } catch (error) {
-        console.error(`❌ Error processing context: ${error.message}`);
-        process.exit(1);
-    }
+    const guarded = applyDigestPolicy(
+      process.cwd(),
+      files,
+      stats.totalTokens,
+      'cli --gitingest-from-context'
+    );
+    const formatter = new GitIngestFormatter(process.cwd(), stats, guarded.files);
+
+    const digestPath = path.join(process.cwd(), 'digest.txt');
+    const digestSize = formatter.saveToFile(digestPath);
+    guarded.audit(digestPath, formatter);
+
+    console.log(`💾 GitIngest digest saved to: digest.txt`);
+    console.log(`📊 Digest size: ${(digestSize / 1024).toFixed(1)} KB`);
+    console.log(`✨ Generated from: ${path.basename(contextPath)}`);
+  } catch (error) {
+    console.error(`❌ Error processing context: ${error.message}`);
+    process.exit(error.exitCode ?? 1);
+  }
 }
 
 /**
  * Main execution
  */
 async function main(args = process.argv.slice(2)) {
-    if (args.includes('--help') || args.includes('-h')) {
-        printHelp();
-        return;
-    }
-
-    // Handle --gitingest-from-report
-    const reportFlagIndex = args.indexOf('--gitingest-from-report');
-    if (reportFlagIndex !== -1) {
-        const reportPath = args[reportFlagIndex + 1] || 'token-analysis-report.json';
-        generateDigestFromReport(reportPath);
-        return;
-    }
-
-    // Handle --gitingest-from-context
-    const contextFlagIndex = args.indexOf('--gitingest-from-context');
-    if (contextFlagIndex !== -1) {
-        const contextPath = args[contextFlagIndex + 1] || 'llm-context.json';
-        generateDigestFromContext(contextPath);
-        return;
-    }
-
-    const options = {
-        saveReport: args.includes('--save-report') || args.includes('-s'),
-        verbose: args.includes('--verbose') || args.includes('-v'),
-        contextExport: args.includes('--context-export'),
-        contextToClipboard: args.includes('--context-clipboard'),
-        methodLevel: args.includes('--method-level') || args.includes('-m'),
-        gitingest: args.includes('--gitingest') || args.includes('-g')
-    };
-
-    printStartupInfo();
-
-    const calculator = new TokenCalculator(process.cwd(), options);
-    await calculator.run();
+  if (args.includes('--help') || args.includes('-h')) {
+    printHelp();
+    return;
+  }
+
+  // Handle --gitingest-from-report
+  const reportFlagIndex = args.indexOf('--gitingest-from-report');
+  if (reportFlagIndex !== -1) {
+    const reportPath = args[reportFlagIndex + 1] || 'token-analysis-report.json';
+    generateDigestFromReport(reportPath);
+    return;
+  }
+
+  // Handle --gitingest-from-context
+  const contextFlagIndex = args.indexOf('--gitingest-from-context');
+  if (contextFlagIndex !== -1) {
+    const contextPath = args[contextFlagIndex + 1] || 'llm-context.json';
+    generateDigestFromContext(contextPath);
+    return;
+  }
+
+  const options = {
+    saveReport: args.includes('--save-report') || args.includes('-s'),
+    verbose: args.includes('--verbose') || args.includes('-v'),
+    contextExport: args.includes('--context-export'),
+    contextToClipboard: args.includes('--context-clipboard'),
+    methodLevel: args.includes('--method-level') || args.includes('-m'),
+    gitingest: args.includes('--gitingest') || args.includes('-g'),
+  };
+
+  try {
+    options.policy = loadPolicy(process.cwd());
+  } catch (error) {
+    console.error(`❌ ${error.message}`);
+    process.exit(error.exitCode ?? 2);
+  }
+
+  printStartupInfo();
+
+  const calculator = new TokenCalculator(process.cwd(), options);
+  await calculator.run();
 }
 
 function printStartupInfo() {
-    console.log('🚀 Code Analyzer by Hakkı Sağdıç');
-    console.log('='.repeat(50));
-    console.log('📋 Available options:');
-    console.log('  --save-report, -s     Save detailed JSON report');
-    console.log('  --verbose, -v         Show included files and directories');
-    console.log('  --context-export      Generate LLM context file list');
-    console.log('  --context-clipboard   Copy context to clipboard');
-    console.log('  --method-level, -m    Enable method-level analysis');
-    console.log('  --gitingest, -g       Generate GitIngest-style digest');
-    console.log('  --help, -h           Show this help message');
-
-    if (!TokenUtils.hasExactCounting()) {
-        console.log('\n💡 For exact token counts, install tiktoken: npm install tiktoken');
-    }
-    console.log();
+  console.log('🚀 Code Analyzer by Hakkı Sağdıç');
+  console.log('='.repeat(50));
+  console.log('📋 Available options:');
+  console.log('  --save-report, -s     Save detailed JSON report');
+  console.log('  --verbose, -v         Show included files and directories');
+  console.log('  --context-export      Generate LLM context file list');
+  console.log('  --context-clipboard   Copy context to clipboard');
+  console.log('  --method-level, -m    Enable method-level analysis');
+  console.log('  --gitingest, -g       Generate GitIngest-style digest');
+  console.log('  --help, -h           Show this help message');
+
+  if (!TokenUtils.hasExactCounting()) {
+    console.log('\n💡 For exact token counts, install tiktoken: npm install tiktoken');
+  }
+  console.log();
 }
 
 function printHelp() {
-    console.log('Ctxman - LLM context optimization with method-level filtering');
-    console.log();
-    console.log('Usage: ctxman [options]');
-    console.log('       node ctxman.js [options]  # Direct usage');
-    console.log();
-    console.log('Options:');
-    console.log('  -s, --save-report                    Save detailed JSON report');
-    console.log('  -v, --verbose                        Show all included files');
-    console.log('  --context-export                     Generate LLM context file');
-    console.log('  --context-clipboard                  Copy context to clipboard');
-    console.log('  -m, --method-level                   Enable method-level analysis');
-    console.log('  -g, --gitingest                      Generate GitIngest-style digest');
-    console.log('  --gitingest-from-report <file>       Generate digest from report JSON');
-    console.log('  --gitingest-from-context <file>      Generate digest from context JSON');
-    console.log('  -h, --help                           Show this help');
-    console.log();
-    console.log('Method-level Configuration:');
-    console.log('  .methodinclude                       Include only specified methods');
-    console.log('  .methodignore                        Exclude specified methods');
-    console.log();
-    console.log('Examples:');
-    console.log('  # Standard workflow');
-    console.log('  ctxman                      # Interactive export selection');
-    console.log('  ctxman --save-report        # Save JSON report');
-    console.log('  ctxman --gitingest          # Generate digest.txt');
-    console.log('  ctxman -g -s                # Both digest + report');
-    console.log();
-    console.log('  # Generate digest from existing JSON files (fast, no re-scan)');
-    console.log('  ctxman --gitingest-from-report token-analysis-report.json');
-    console.log('  ctxman --gitingest-from-context llm-context.json');
-    console.log();
-    console.log('  # Two-step workflow');
-    console.log('  ctxman -s                   # Step 1: Analyze and save report');
-    console.log('  ctxman --gitingest-from-report token-analysis-report.json');
-    console.log('                                       # Step 2: Generate digest (instant)');
+  console.log('Ctxman - LLM context optimization with method-level filtering');
+  console.log();
+  console.log('Usage: ctxman [options]');
+  console.log('       node ctxman.js [options]  # Direct usage');
+  console.log();
+  console.log('Options:');
+  console.log('  -s, --save-report                    Save detailed JSON report');
+  console.log('  -v, --verbose                        Show all included files');
+  console.log('  --context-export                     Generate LLM context file');
+  console.log('  --context-clipboard                  Copy context to clipboard');
+  console.log('  -m, --method-level                   Enable method-level analysis');
+  console.log('  -g, --gitingest                      Generate GitIngest-style digest');
+  console.log('  --gitingest-from-report <file>       Generate digest from report JSON');
+  console.log('  --gitingest-from-context <file>      Generate digest from context JSON');
+  console.log('  -h, --help                           Show this help');
+  console.log();
+  console.log('Method-level Configuration:');
+  console.log('  .methodinclude                       Include only specified methods');
+  console.log('  .methodignore                        Exclude specified methods');
+  console.log();
+  console.log('Examples:');
+  console.log('  # Standard workflow');
+  console.log('  ctxman                      # Interactive export selection');
+  console.log('  ctxman --save-report        # Save JSON report');
+  console.log('  ctxman --gitingest          # Generate digest.txt');
+  console.log('  ctxman -g -s                # Both digest + report');
+  console.log();
+  console.log('  # Generate digest from existing JSON files (fast, no re-scan)');
+  console.log('  ctxman --gitingest-from-report token-analysis-report.json');
+  console.log('  ctxman --gitingest-from-context llm-context.json');
+  console.log();
+  console.log('  # Two-step workflow');
+  console.log('  ctxman -s                   # Step 1: Analyze and save report');
+  console.log('  ctxman --gitingest-from-report token-analysis-report.json');
+  console.log('                                       # Step 2: Generate digest (instant)');
 }
 
 // ESM entry point check
 if (import.meta.url === `file://${process.argv[1]}`) {
-    main();
+  main();
 }
 
-export {
-    TokenCalculator,
-    generateDigestFromReport,
-    generateDigestFromContext,
-    main
-};
+export { TokenCalculator, generateDigestFromReport, generateDigestFromContext, main };

package/examples/README.md

@@ -30,11 +30,13 @@ Wizard profiles are pre-configured analysis templates that optimize context gene
 ### Active vs Reference Profiles
 
 **Active Profiles:**
+
 - Location: `.ctxman/wizard-profiles/`
 - Used by the wizard during interactive setup
 - Can be modified or deleted by users
 
 **Reference Profiles (this directory):**
+
 - Location: `examples/wizard-profiles/`
 - Backup copies of default profiles
 - Use these to restore or create custom profiles
@@ -42,36 +44,42 @@ Wizard profiles are pre-configured analysis templates that optimize context gene
 ## 📋 Available Profiles
 
 ### 👀 Code Review
+
 **Purpose:** Reviewing code changes and PRs
 **Token Budget:** 20K-80K tokens
 **Includes:** Source code, tests, configurations
 **Best For:** Pull requests, architecture understanding
 
 ### 🔒 Security Audit
+
 **Purpose:** Security assessments and vulnerability analysis
 **Token Budget:** 15K-60K tokens
 **Includes:** Auth modules, API endpoints, database code
 **Best For:** Pre-deployment security reviews, compliance audits
 
 ### 💡 LLM Explain
+
 **Purpose:** Explaining code architecture to AI
 **Token Budget:** 25K-100K tokens
 **Includes:** Core source, entry points, documentation
 **Best For:** Understanding unfamiliar codebases, onboarding
 
 ### 📚 Documentation
+
 **Purpose:** Generating API docs and guides
 **Token Budget:** 18K-70K tokens
 **Includes:** Public APIs, type definitions, exports
 **Best For:** API documentation, user guides, README updates
 
 ### 🎯 Minimal
+
 **Purpose:** Quick queries with minimal token usage
 **Token Budget:** 5K-25K tokens
 **Includes:** Core source only
 **Best For:** Bug fixes, focused debugging, token-limited scenarios
 
 ### 📦 Full
+
 **Purpose:** Comprehensive codebase analysis
 **Token Budget:** 50K-500K+ tokens
 **Includes:** Everything (all source, tests, docs)
@@ -119,6 +127,7 @@ touch .ctxman/wizard-profiles/my-profile/.methodignore
 ```
 
 **profile.json structure:**
+
 ```json
 {
   "id": "my-profile",
@@ -138,10 +147,7 @@ touch .ctxman/wizard-profiles/my-profile/.methodignore
     "files": ["What files are excluded"],
     "methods": ["What methods are excluded"]
   },
-  "bestFor": [
-    "Use case 1",
-    "Use case 2"
-  ]
+  "bestFor": ["Use case 1", "Use case 2"]
 }
 ```
 
@@ -160,6 +166,7 @@ nano .ctxman/custom-profiles.json
 ```
 
 **Example custom LLM profile:**
+
 ```json
 {
   "models": [
@@ -215,6 +222,7 @@ init*                # Initialization methods
 When you select a profile in the wizard:
 
 1. **Profile files are copied** with profile name suffix:
+
    ```
    .contextinclude-code-review
    .contextignore-code-review
@@ -223,6 +231,7 @@ When you select a profile in the wizard:
    ```
 
 2. **Active configs are created** (copies for current analysis):
+
    ```
    .contextinclude  → copy of .contextinclude-code-review
    .contextignore   → copy of .contextignore-code-review
@@ -241,16 +250,19 @@ When you select a profile in the wizard:
 ## 🎯 Best Practices
 
 ### Profile Naming
+
 - Use lowercase with hyphens: `my-custom-profile`
 - Choose descriptive names: `react-component-review`, `api-security-audit`
 
 ### Token Budgets
+
 - **Minimal:** 5K-25K tokens
 - **Focused:** 20K-80K tokens (code-review, security-audit)
 - **Balanced:** 50K-100K tokens (llm-explain, documentation)
 - **Comprehensive:** 100K-500K+ tokens (full)
 
 ### Filter Design
+
 - **Include mode** (`.contextinclude` / `.methodinclude`): Best for focused analysis
 - **Exclude mode** (`.contextignore` / `.methodignore`): Best for broad analysis with exceptions
 - **Combined mode**: Use both for fine-grained control
@@ -264,16 +276,19 @@ When you select a profile in the wizard:
 ## 🆘 Troubleshooting
 
 **Profile not appearing in wizard?**
+
 - Ensure `profile.json` exists and is valid JSON
 - Check that profile directory is in `.ctxman/wizard-profiles/`
 - Profile ID must match directory name
 
 **Filters not working?**
+
 - Check `.gitignore` first (it always takes precedence)
 - Verify pattern syntax (use `**` for recursive matching)
 - Test patterns with `ctxman --analyze`
 
 **Need to reset everything?**
+
 ```bash
 # Remove all active profiles and configs
 rm -rf .ctxman/wizard-profiles

package/examples/github-actions/ctxman-check.yml

@@ -0,0 +1,49 @@
+# ctxman context check for pull requests
+#
+# Copy this file to .github/workflows/ctxman-check.yml in your repository. On every pull
+# request it counts the tokens of the files the pull request changes, fails when they
+# exceed the budget, reports whether they fit Claude Sonnet 4.5's context window in the
+# job summary and uploads the TOON context file as an artifact.
+#
+# Pin the action to a release tag or a commit SHA instead of main for reproducible runs.
+# Inputs, outputs and limits: https://github.com/hakkisagdic/ctxman/blob/main/docs/commands/ci.md
+
+name: ctxman context check
+
+on:
+  pull_request:
+
+permissions:
+  contents: read
+
+jobs:
+  context:
+    name: Context size
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v7
+        with:
+          persist-credentials: false
+          # changed-since needs the base commit of the pull request in the checkout
+          fetch-depth: 0
+
+      - name: ctxman context check
+        id: ctxman
+        uses: hakkisagdic/ctxman@main
+        with:
+          changed-since: ${{ github.event.pull_request.base.sha }}
+          max-tokens: 50000
+          target-model: claude-sonnet-5-5
+          export: toon
+          upload-artifact: true
+
+      - name: Use the outputs
+        if: ${{ !cancelled() }}
+        env:
+          TOTAL_TOKENS: ${{ steps.ctxman.outputs.total-tokens }}
+          TOTAL_FILES: ${{ steps.ctxman.outputs.total-files }}
+          FITS: ${{ steps.ctxman.outputs.fits }}
+        run: echo "The pull request changes $TOTAL_FILES files with $TOTAL_TOKENS tokens (fits Claude Sonnet 4.5 - $FITS)"

package/examples/wizard-profiles/security-audit/profile.json

@@ -10,7 +10,13 @@
   },
   "includes": {
     "files": ["Auth modules", "API endpoints", "Middleware", "Database code", "Security configs"],
-    "methods": ["Authentication", "Validation", "Cryptography", "Database queries", "File operations"]
+    "methods": [
+      "Authentication",
+      "Validation",
+      "Cryptography",
+      "Database queries",
+      "File operations"
+    ]
   },
   "excludes": {
     "files": ["Tests", "Documentation", "Build artifacts"],