//! Trufflehog subprocess invocation + result persistence.
//!
//! Droidsaw does not bundle trufflehog. This module is the shared
//! invoke + persist helper consumed by:
//!
//! - The MCP `audit` handler (`mcp/mod.rs` — `mode.runs_trufflehog()`
//!   branch), and
//! - The CLI `audit --mode=full | --mode=trufflehog` dispatch
//!   (`commands::audit_full_with_mode` /
//!   `commands::audit_light_with_mode`).
//!
//! Both callers receive an identical `serde_json::Value` envelope
//! describing what happened — the gauge consumed by the audit
//! output's `detectors.trufflehog` field. Whether persistence writes
//! land in a per-input temp DB (MCP) or a per-input `./droidsaw-<stem>.db`
//! (CLI default) is a caller decision: the helper accepts a `db_path`.

pub mod run;

pub use run::run_and_persist;
