cognitive_complexity

• Fix action.yml monorepo auto-detection to evaluate default lib vs
  packages existence against the caller's $GITHUB_WORKSPACE instead of
  $ACTION_PATH (#76).
• Fix action.yml to run the scanner from the caller's $GITHUB_WORKSPACE
  rather than $ACTION_PATH, so relative targets and --git-diff resolve
  against the repository under audit when the action is used from another
  repository (#76).
• Add --comment-output and --max-comment-rows CLI options: with
  --format=github, write a second report capped to the most significant rows
  (violations, then increases, then additions) for posting as a PR comment,
  while the step summary keeps the full table (#49).
• Add commentFile and maxCommentRows parameters to GitHubReporter.
• Add max-comment-rows input to the GitHub Action (default 0 = unlimited)
  to keep sticky comments under GitHub's 65536-character body limit.
• Anchor GitHub annotations to the declaration line only, so they render
  under the function signature instead of after the closing brace (#55).
• Move package into pub workspace monorepo layout under packages/cognitive_complexity.
• Restore root action.yml and skills/ structure for monorepo workspace.

• Fix action.yml monorepo auto-detection to evaluate default lib vs packages existence against the caller's $GITHUB_WORKSPACE instead of $ACTION_PATH (#76).
• Fix action.yml to run the scanner from the caller's $GITHUB_WORKSPACE rather than $ACTION_PATH, so relative targets and --git-diff resolve against the repository under audit when the action is used from another repository (#76).
• Add --comment-output and --max-comment-rows CLI options: with --format=github, write a second report capped to the most significant rows (violations, then increases, then additions) for posting as a PR comment, while the step summary keeps the full table (#49).
• Add commentFile and maxCommentRows parameters to GitHubReporter.
• Add max-comment-rows input to the GitHub Action (default 0 = unlimited) to keep sticky comments under GitHub's 65536-character body limit.
• Anchor GitHub annotations to the declaration line only, so they render under the function signature instead of after the closing brace (#55).
• Move package into pub workspace monorepo layout under packages/cognitive_complexity.
• Restore root action.yml and skills/ structure for monorepo workspace.

• Fix data_flow crashing with PathNotFoundException when run as a
  standalone AOT executable (dart run cognitive_complexity:data_flow@ /
  dart install), where SDK auto-discovery resolved to the app bundle
  (#21):
  • Fail fast with an actionable error (pass --sdk-path, set DART_SDK,
    or put an SDK on PATH) instead of handing the analyzer an unresolved
    SDK location.
  • Teach PATH-based discovery the Flutter checkout layout: a
    flutter/bin/dart wrapper script now resolves to
    flutter/bin/cache/dart-sdk.
  • Add a FLUTTER_ROOT discovery fallback.
  • Add a --sdk-path option to the data_flow CLI (plumbed to the
    existing DataFlowAnalyzer.sdkPath parameter); invalid explicit paths
    are rejected with a clear error.
• Fix --fail-on-increase ignoring --fail-threshold: when both are set,
  an increase now only fails the run if the new score exceeds the
  threshold. Sub-threshold increases are still reported (delta table, PR
  comment) but no longer block healthy changes such as added error
  handling. Without --fail-threshold, the strict any-increase ratchet is
  unchanged.
• Update the dart-cognitive-complexity agent skill:
  • Add explicit rule under Tier 1/2 prescribing that extracted private helper
    routines that do not read or mutate class instance state (this) must be
    declared as private top-level functions (or static methods) rather than
    instance methods.

• Replace table truncation notice with inline summary comment linking to step summary.

• Fix data_flow crashing with PathNotFoundException when run as a standalone AOT executable (dart run cognitive_complexity:data_flow@ / dart install), where SDK auto-discovery resolved to the app bundle (#21):
  • Fail fast with an actionable error (pass --sdk-path, set DART_SDK, or put an SDK on PATH) instead of handing the analyzer an unresolved SDK location.
  • Teach PATH-based discovery the Flutter checkout layout: a flutter/bin/dart wrapper script now resolves to flutter/bin/cache/dart-sdk.
  • Add a FLUTTER_ROOT discovery fallback.
  • Add a --sdk-path option to the data_flow CLI (plumbed to the existing DataFlowAnalyzer.sdkPath parameter); invalid explicit paths are rejected with a clear error.
• Fix --fail-on-increase ignoring --fail-threshold: when both are set, an increase now only fails the run if the new score exceeds the threshold. Sub-threshold increases are still reported (delta table, PR comment) but no longer block healthy changes such as added error handling. Without --fail-threshold, the strict any-increase ratchet is unchanged.
• Update the dart-cognitive-complexity agent skill:
  • Add explicit rule under Tier 1/2 prescribing that extracted private helper routines that do not read or mutate class instance state (this) must be declared as private top-level functions (or static methods) rather than instance methods.

• Add an example.
• Remove accidental export of internal CognitiveComplexityVisitor from
  package:cognitive_complexity/cognitive_complexity.dart.

• Add an example.
• Remove accidental export of internal CognitiveComplexityVisitor from package:cognitive_complexity/cognitive_complexity.dart.

• Streamline README.md into a focused, scannable TL;DR.
• Extract deep-dive reference documentation into modular guides under doc/:
  • doc/scoring.md: Scoring matrix, nesting multipliers, and Dart 3 AST rules.
  • doc/cli.md: Command-line options, git diff delta evaluation, and CI ratcheting.
  • doc/data_flow.md: Statement data-flow analysis, method extraction theory, and programmatic API.
  • doc/github_actions.md: Complete GitHub Action workflow setup, parameters, and fork security permissions.

• Streamline README.md into a focused, scannable TL;DR.
• Extract deep-dive reference documentation into modular guides under doc/:
  • doc/scoring.md: Scoring matrix, nesting multipliers, and Dart 3 AST rules.
  • doc/cli.md: Command-line options, git diff delta evaluation, and CI ratcheting.
  • doc/data_flow.md: Statement data-flow analysis, method extraction theory, and programmatic API.
  • doc/github_actions.md: Complete GitHub Action workflow setup, parameters, and fork security permissions.

• Fix column wrapping and alignment formatting in markdown report tables.

• Introduce data_flow analysis tool and library (package:cognitive_complexity/data_flow.dart):
  • Added DataFlowAnalyzer to extract reaching definitions (inputs), variable mutations, and live outputs for arbitrary statement slices.
  • Added SignatureSynthesizer to automatically generate Dart 3 Record method signatures (({TypeA a, TypeB b})).
  • Added data_flow CLI with agent-first JSON formatting by default and formatted text reports.
  • Hardened slice analysis: pattern assignments ((a, b) = (b, a)), pattern variable declarations, labeled break/continue targeting outside the slice, rethrow whose catch lies outside the slice, mutations of captured variables inside nested closures, and constructor initializers.
  • Added ControlFlowEscapeType.closureEscape, rethrowEscape, and constructorInitializerEscape.
  • Signatures now propagate await for async-ness, use use-site static types (preserving promotion), include enclosing type parameters with their bounds, and sanitize/deduplicate record field names.
  • Liveness now follows loop back edges: a variable mutated in a slice inside a loop is reported as an output when it is read anywhere in that loop, even textually before the slice.

• Update the dart-cognitive-complexity agent skill: anti-goodhart 3-tier decomposition rubric with deterministic tier selection via the data_flow CLI, and a gated Tier 3 method-object reference (references/method-object.md) absorbed from kevmoo/kevmoo_skills.
• No library or CLI code changes.

• Refine the skill's 3-Tier Decomposition Rubric per empirical feedback
  (#19):
  • "Slice at natural seams" rule: enlarge slices to whole loops/state
    machines before classifying; solves coupled 2-variable state
    (queue + visited) without weakening the Tier 3 gate (stays at >= 3
    with recorded evidence).
  • Named records for private/file-local slices at any output count;
    dedicated Result dataclasses reserved for public API boundaries
    (aligns the rubric with the data_flow signature synthesizer).
  • Pattern E: loop-body extraction with explicit signal returns
    (enum/sealed) instead of boolean control-flow flags; ordered
    dispositions for control-flow escapes.
  • Domain-modeling exit: promoting coupled state to a real named, tested
    domain class is out of rubric scope — the gate bans _Runner facades,
    not real abstractions.
• No library or CLI code changes.

• Refine the skill's 3-Tier Decomposition Rubric per empirical feedback (#19):
  • "Slice at natural seams" rule: enlarge slices to whole loops/state machines before classifying; solves coupled 2-variable state (queue + visited) without weakening the Tier 3 gate (stays at >= 3 with recorded evidence).
  • Named records for private/file-local slices at any output count; dedicated Result dataclasses reserved for public API boundaries (aligns the rubric with the data_flow signature synthesizer).
  • Pattern E: loop-body extraction with explicit signal returns (enum/sealed) instead of boolean control-flow flags; ordered dispositions for control-flow escapes.
  • Domain-modeling exit: promoting coupled state to a real named, tested domain class is out of rubric scope — the gate bans _Runner facades, not real abstractions.
• No library or CLI code changes.

• Add support for GitHub Actions step summary and comment outputs.

• Broaden analyzer compatibility to support versions 12.x through 14.x.

• Add Data-Flow analysis and helper extraction engine.

Scoring fixes aligning with the SonarSource Cognitive Complexity whitepaper (v1.7) and its reference implementation (sonar-java):

• else if chains no longer deepen nesting: branch contents sit one level below the head if (previously each chain link added an extra level).
• switch statements/expressions and catch clauses now receive the standard nesting increment when nested (previously flat +1).
• Local function declarations no longer add a structural +1; like lambdas, they only deepen nesting.

Analyzer coverage and CLI fixes:

• Constructor initializers and parameter default values are now scored.
• Top-level functions named with pseudo-keywords (show, on, ...) are no longer skipped.
• Top-level getters/setters are reported with a get /set prefix, matching class members.
• --fail-on-increase no longer flags newly added declarations (they have no baseline); they are governed by --fail-threshold alone.
• Directory exclusion (.git, .dart_tool, build) now matches whole path segments, so .github/ and similar directories are scanned correctly.

• Initial release of reachability and dead/unused declaration analyzer.
• Support for CLI execution, package entrypoint harvesting, and Flutter/test
  framework adapters.
• Deterministic analysis modes: open-world (libraries) and closed-app
  (standalone/executables).
• Custom suppression directives: // undead:ignore and
  // undead:ignore_for_file.

• Initial release of core utilities, SDK discovery, Git integration, and CI reporting.

• Initial release of pkg:dedupe:
  • Token-level and structural clone detection across Dart and Flutter codebases.
  • Polynomial rolling hash k-gram indexing and maximal clone extension.
  • Granular normalization filters (--ignore-comments, --ignore-literals, --ignore-identifiers).
  • Persistent content-hashed disk caching (--cache, --cache-dir, --clear-cache).
  • Exact line-union overlapping clone cluster deduplication and net lines saved analysis.
  • Linear adjacent chaining and MinHash token verification for large-scale clone clusters (>50 instances).
  • Git diff integration and PR delta scanning (--git-diff, --only-changed).
  • Multi-format report generation: Markdown, JSON, GitHub Actions annotations/summaries, and terminal text.
  • Per-file duplication metrics, cluster classification, and estimated lines saved analysis.
  • Value-semantic, immutable report models (CloneInstance, DuplicateCluster, DedupeReport) with full JSON serialization.
  • CLI binary entrypoint (bin/dedupe.dart).

• Initial release of Cognitive Complexity calculation engine and CLI tool.

• Initial version.