Armor shared libraries with hidden symbol visibility; add _internal companions, optimization flags, and PHLEX_HIDE_SYMBOLS/PHLEX_ENABLE_IPO options

.github/workflows/clang-format-fix.yaml

@@ -8,7 +8,9 @@ run-name: "${{ github.actor }} fixing C++ code format"
   workflow_dispatch:
     inputs:
       ref:
-        description: "The branch name to checkout and push fixes to (must be a branch, not a commit SHA). Defaults to the repository's default branch."
+        description:
+          "The branch name to checkout and push fixes to (must be a branch, not a commit SHA). Defaults to the
+          repository's default branch."
         required: false
         type: string
   workflow_call:
@@ -52,8 +54,7 @@ permissions:
   contents: write
 
 env:
-  local_checkout_path:
-    ${{ inputs.checkout-path || format('{0}-src', github.event.repository.name) }}
+  local_checkout_path: ${{ inputs.checkout-path || format('{0}-src', github.event.repository.name) }}
 
 jobs:
   pre-check:
@@ -70,11 +71,11 @@ jobs:
     # This covers repo owners, invited collaborators, and all org members.
     outputs:
       ref:
-        ${{ inputs.ref || (github.event_name == 'workflow_dispatch' &&
-        (github.event.inputs.ref || github.ref_name)) || steps.get_pr.outputs.ref }}
+        ${{ inputs.ref || (github.event_name == 'workflow_dispatch' && (github.event.inputs.ref || github.ref_name)) ||
+        steps.get_pr.outputs.ref }}
       repo:
-        ${{ inputs.repo || (github.event_name == 'workflow_dispatch' &&
-        github.repository) || steps.get_pr.outputs.repo }}
+        ${{ inputs.repo || (github.event_name == 'workflow_dispatch' && github.repository) || steps.get_pr.outputs.repo
+        }}
 
     steps:
       - name: Get PR Info

.github/workflows/clang-tidy-fix.yaml

@@ -8,7 +8,9 @@ name: Clang-Tidy Fix
   workflow_dispatch:
     inputs:
       ref:
-        description: "The branch name to checkout and push fixes to (must be a branch, not a commit SHA). Defaults to the repository's default branch."
+        description:
+          "The branch name to checkout and push fixes to (must be a branch, not a commit SHA). Defaults to the
+          repository's default branch."
         required: false
         type: string
       tidy-checks:

.github/workflows/cmake-format-fix.yaml

@@ -8,7 +8,9 @@ run-name: "${{ github.actor }} fixing CMake format"
   workflow_dispatch:
     inputs:
       ref:
-        description: "The branch name to checkout and push fixes to (must be a branch, not a commit SHA). Defaults to the repository's default branch."
+        description:
+          "The branch name to checkout and push fixes to (must be a branch, not a commit SHA). Defaults to the
+          repository's default branch."
         required: false
         type: string
   workflow_call:
@@ -52,8 +54,7 @@ permissions:
   contents: write
 
 env:
-  local_checkout_path:
-    ${{ inputs.checkout-path || format('{0}-src', github.event.repository.name) }}
+  local_checkout_path: ${{ inputs.checkout-path || format('{0}-src', github.event.repository.name) }}
 
 jobs:
   pre-check:
@@ -70,11 +71,11 @@ jobs:
     # This covers repo owners, invited collaborators, and all org members.
     outputs:
       ref:
-        ${{ inputs.ref || (github.event_name == 'workflow_dispatch' &&
-        (github.event.inputs.ref || github.ref_name)) || steps.get_pr.outputs.ref }}
+        ${{ inputs.ref || (github.event_name == 'workflow_dispatch' && (github.event.inputs.ref || github.ref_name)) ||
+        steps.get_pr.outputs.ref }}
       repo:
-        ${{ inputs.repo || (github.event_name == 'workflow_dispatch' &&
-        github.repository) || steps.get_pr.outputs.repo }}
+        ${{ inputs.repo || (github.event_name == 'workflow_dispatch' && github.repository) || steps.get_pr.outputs.repo
+        }}
 
     steps:
       - name: Get PR Info

.github/workflows/codeql-analysis.yaml

@@ -218,13 +218,7 @@ jobs:
           fi
 
   determine-languages:
-    needs:
-      [
-        pre-check,
-        detect-changes-cpp,
-        detect-changes-python,
-        detect-changes-actions,
-      ]
+    needs: [pre-check, detect-changes-cpp, detect-changes-python, detect-changes-actions]
     if: always() && needs.pre-check.result == 'success'
     runs-on: ubuntu-latest
     outputs:

.github/workflows/header-guards-fix.yaml

@@ -43,7 +43,9 @@ run-name: "${{ github.actor }} fixing header guards"
   workflow_dispatch:
     inputs:
       ref:
-        description: "The branch name to checkout and push fixes to (must be a branch, not a commit SHA). Defaults to the repository's default branch."
+        description:
+          "The branch name to checkout and push fixes to (must be a branch, not a commit SHA). Defaults to the
+          repository's default branch."
         required: false
         type: string
 
@@ -52,8 +54,7 @@ permissions:
   contents: write
 
 env:
-  local_checkout_path:
-    ${{ inputs.checkout-path || format('{0}-src', github.event.repository.name) }}
+  local_checkout_path: ${{ inputs.checkout-path || format('{0}-src', github.event.repository.name) }}
 
 jobs:
   pre-check:
@@ -70,11 +71,11 @@ jobs:
     # This covers repo owners, invited collaborators, and all org members.
     outputs:
       ref:
-        ${{ inputs.ref || (github.event_name == 'workflow_dispatch' &&
-        (github.event.inputs.ref || github.ref_name)) || steps.get_pr.outputs.ref }}
+        ${{ inputs.ref || (github.event_name == 'workflow_dispatch' && (github.event.inputs.ref || github.ref_name)) ||
+        steps.get_pr.outputs.ref }}
       repo:
-        ${{ inputs.repo || (github.event_name == 'workflow_dispatch' &&
-        github.repository) || steps.get_pr.outputs.repo }}
+        ${{ inputs.repo || (github.event_name == 'workflow_dispatch' && github.repository) || steps.get_pr.outputs.repo
+        }}
 
     steps:
       - name: Get PR Info

.github/workflows/jsonnet-format-fix.yaml

@@ -8,7 +8,9 @@ run-name: "${{ github.actor }} fixing Jsonnet format"
   workflow_dispatch:
     inputs:
       ref:
-        description: "The branch name to checkout and push fixes to (must be a branch, not a commit SHA). Defaults to the repository's default branch."
+        description:
+          "The branch name to checkout and push fixes to (must be a branch, not a commit SHA). Defaults to the
+          repository's default branch."
         required: false
         type: string
   workflow_call:
@@ -52,8 +54,7 @@ permissions:
   contents: write
 
 env:
-  local_checkout_path:
-    ${{ inputs.checkout-path || format('{0}-src', github.event.repository.name) }}
+  local_checkout_path: ${{ inputs.checkout-path || format('{0}-src', github.event.repository.name) }}
 
 jobs:
   pre-check:
@@ -70,11 +71,11 @@ jobs:
     # This covers repo owners, invited collaborators, and all org members.
     outputs:
       ref:
-        ${{ inputs.ref || (github.event_name == 'workflow_dispatch' &&
-        (github.event.inputs.ref || github.ref_name)) || steps.get_pr.outputs.ref }}
+        ${{ inputs.ref || (github.event_name == 'workflow_dispatch' && (github.event.inputs.ref || github.ref_name)) ||
+        steps.get_pr.outputs.ref }}
       repo:
-        ${{ inputs.repo || (github.event_name == 'workflow_dispatch' &&
-        github.repository) || steps.get_pr.outputs.repo }}
+        ${{ inputs.repo || (github.event_name == 'workflow_dispatch' && github.repository) || steps.get_pr.outputs.repo
+        }}
 
     steps:
       - name: Get PR Info

.github/workflows/markdown-fix.yaml

@@ -43,7 +43,9 @@ run-name: "${{ github.actor }} fixing Markdown format"
   workflow_dispatch:
     inputs:
       ref:
-        description: "The branch name to checkout and push fixes to (must be a branch, not a commit SHA). Defaults to the repository's default branch."
+        description:
+          "The branch name to checkout and push fixes to (must be a branch, not a commit SHA). Defaults to the
+          repository's default branch."
         required: false
         type: string
 
@@ -52,8 +54,7 @@ permissions:
   contents: write
 
 env:
-  local_checkout_path:
-    ${{ inputs.checkout-path || format('{0}-src', github.event.repository.name) }}
+  local_checkout_path: ${{ inputs.checkout-path || format('{0}-src', github.event.repository.name) }}
 
 jobs:
   pre-check:
@@ -70,11 +71,11 @@ jobs:
     # This covers repo owners, invited collaborators, and all org members.
     outputs:
       ref:
-        ${{ inputs.ref || (github.event_name == 'workflow_dispatch' &&
-        (github.event.inputs.ref || github.ref_name)) || steps.get_pr.outputs.ref }}
+        ${{ inputs.ref || (github.event_name == 'workflow_dispatch' && (github.event.inputs.ref || github.ref_name)) ||
+        steps.get_pr.outputs.ref }}
       repo:
-        ${{ inputs.repo || (github.event_name == 'workflow_dispatch' &&
-        github.repository) || steps.get_pr.outputs.repo }}
+        ${{ inputs.repo || (github.event_name == 'workflow_dispatch' && github.repository) || steps.get_pr.outputs.repo
+        }}
 
     steps:
       - name: Get PR Info

.github/workflows/python-fix.yaml

@@ -8,7 +8,9 @@ run-name: "${{ github.actor }} fixing Python code"
   workflow_dispatch:
     inputs:
       ref:
-        description: "The branch name to checkout and push fixes to (must be a branch, not a commit SHA). Defaults to the repository's default branch."
+        description:
+          "The branch name to checkout and push fixes to (must be a branch, not a commit SHA). Defaults to the
+          repository's default branch."
         required: false
         type: string
   workflow_call:
@@ -52,8 +54,7 @@ permissions:
   contents: write
 
 env:
-  local_checkout_path:
-    ${{ inputs.checkout-path || format('{0}-src', github.event.repository.name) }}
+  local_checkout_path: ${{ inputs.checkout-path || format('{0}-src', github.event.repository.name) }}
 
 jobs:
   pre-check:
@@ -70,11 +71,11 @@ jobs:
     # This covers repo owners, invited collaborators, and all org members.
     outputs:
       ref:
-        ${{ inputs.ref || (github.event_name == 'workflow_dispatch' &&
-        (github.event.inputs.ref || github.ref_name)) || steps.get_pr.outputs.ref }}
+        ${{ inputs.ref || (github.event_name == 'workflow_dispatch' && (github.event.inputs.ref || github.ref_name)) ||
+        steps.get_pr.outputs.ref }}
       repo:
-        ${{ inputs.repo || (github.event_name == 'workflow_dispatch' &&
-        github.repository) || steps.get_pr.outputs.repo }}
+        ${{ inputs.repo || (github.event_name == 'workflow_dispatch' && github.repository) || steps.get_pr.outputs.repo
+        }}
     steps:
       - name: Get PR Info
         if: github.event_name == 'issue_comment' && inputs.ref == ''

.github/workflows/yaml-fix.yaml

@@ -8,7 +8,9 @@ name: YAML Fix
   workflow_dispatch:
     inputs:
       ref:
-        description: "The branch name to checkout and push fixes to (must be a branch, not a commit SHA). Defaults to the repository's default branch."
+        description:
+          "The branch name to checkout and push fixes to (must be a branch, not a commit SHA). Defaults to the
+          repository's default branch."
         required: false
         type: string
   workflow_call:
@@ -52,8 +54,7 @@ permissions:
   contents: write
 
 env:
-  local_checkout_path:
-    ${{ inputs.checkout-path || format('{0}-src', github.event.repository.name) }}
+  local_checkout_path: ${{ inputs.checkout-path || format('{0}-src', github.event.repository.name) }}
 
 jobs:
   pre-check:
@@ -70,11 +71,11 @@ jobs:
     # This covers repo owners, invited collaborators, and all org members.
     outputs:
       ref:
-        ${{ inputs.ref || (github.event_name == 'workflow_dispatch' &&
-        (github.event.inputs.ref || github.ref_name)) || steps.get_pr.outputs.ref }}
+        ${{ inputs.ref || (github.event_name == 'workflow_dispatch' && (github.event.inputs.ref || github.ref_name)) ||
+        steps.get_pr.outputs.ref }}
       repo:
-        ${{ inputs.repo || (github.event_name == 'workflow_dispatch' &&
-        github.repository) || steps.get_pr.outputs.repo }}
+        ${{ inputs.repo || (github.event_name == 'workflow_dispatch' && github.repository) || steps.get_pr.outputs.repo
+        }}
 
     steps:
       - name: Get PR Info

CMakeLists.txt

@@ -58,6 +58,8 @@ set(CTEST_TEST_TIMEOUT 90 CACHE STRING "Per-test timeout (s) for CTest")
 FetchContent_MakeAvailable(Catch2 GSL mimicpp)
 
 include(Modules/private/CreateCoverageTargets.cmake)
+include(Modules/private/PhlexSymbolVisibility.cmake)
+include(Modules/private/PhlexOptimization.cmake)
 
 option(ENABLE_TSAN "Enable Thread Sanitizer" OFF)
 option(ENABLE_ASAN "Enable Address Sanitizer" OFF)