cowork-bot: resolve merge conflict in tests/test_scanner.py (keep both TestMultiLineExportList and master test suites)

Author: DevForge Engineer

.github/workflows/auto-code-review.yml

@@ -0,0 +1,28 @@
+# Automated Code Review — caller workflow
+#
+# Drop this file into any Coding-Dev-Tools repo at
+# .github/workflows/auto-code-review.yml to enable
+# automated PR code review (lint, format, secret detection,
+# TODO/FIXME check, large file check, and PR comment summary).
+#
+# The reusable workflow is defined in the org .github repo:
+# Coding-Dev-Tools/.github/.github/workflows/auto-code-review.yml@main
+
+name: Auto Code Review
+
+on:
+  pull_request:
+    branches: [main, master]
+    types: [opened, synchronize, reopened]
+  push:
+    branches: [main, master]
+  workflow_dispatch:
+
+permissions:
+  contents: read
+  pull-requests: write
+  security-events: write
+
+jobs:
+  code-review:
+    uses: Coding-Dev-Tools/.github/.github/workflows/auto-code-review.yml@main

.gitignore

@@ -71,3 +71,7 @@ Thumbs.db
 research/
 fixtures/generated/
 .ruff_cache/
+
+# Operational state (not for commit)
+LEARNING/
+_cowork_ops/

README.md

@@ -81,12 +81,23 @@ deadcode stats
 - **Monorepo support** — handles large projects efficiently with ignore patterns
 - **CI integration** — JSON output for automated pipelines and gating
 
-## Ignore Patterns
+## Ignore / Include Patterns
 
 ```bash
+# Ignore specific paths
 deadcode scan -i "generated/" -i "**/*.generated.ts"
+
+# Include only matching paths (whitelist)
+deadcode scan --include "src/"                          # Only scan src/
+deadcode scan --include "src/" --include "lib/"          # Multiple dirs
+deadcode remove --dry-run --include "packages/"          # Works with remove
+deadcode stats --include "app/"                          # Works with stats
 ```
 
+`--include` accepts gitignore-style patterns and is repeatable (specify multiple targets).
+When both `--include` and `-i`/`--ignore` are used, `--include` is applied first, then
+`--ignore` excludes any matches within the included paths.
+
 Default ignores: `node_modules/`, `.git/`, `.next/`, `dist/`, `build/`, `public/`, `static/`
 
 ## Pricing
@@ -122,7 +133,7 @@ DeadCode is one of 11 tools in the Revenue Holdings suite. One license covers al
 ---
 
 <p align="center">
-  <sub>Part of <a href="https://coding-dev-tools.github.io/revenueholdings.dev/">Revenue Holdings</a> — CLI tools built by autonomous AI.</sub>
+  <sub>Part of <a href="https://coding-dev-tools.github.io/devforge/">Revenue Holdings</a> — CLI tools built by autonomous AI.</sub>
 </p>
 
 ## CI/CD Integration

automation/ops-heartbeat/references/ops-heartbeat-observations.md

@@ -0,0 +1,6 @@
+date: 2026-06-10
+project: deadcode-cli
+runner: pytest on Python 3.12
+findings:
+  - 2026-06-10T__:fast smoke `py -3.12 -m pytest --no-header -q -q --maxfail=1` passed.
+  - full suite: pending

pyproject.toml

@@ -46,9 +46,15 @@ Changelog = "https://github.com/Coding-Dev-Tools/deadcode/releases"
 [project.scripts]
 deadcode = "deadcode.cli:cli"
 
+[tool.setuptools]
+include-package-data = true
+
 [tool.setuptools.packages.find]
 where = ["src"]
 
+[tool.setuptools.package-data]
+deadcode = ["py.typed"]
+
 [tool.pytest.ini_options]
 testpaths = ["tests"]
 python_files = ["test_*.py"]
@@ -62,4 +68,4 @@ select = ["E", "F", "W", "I", "UP", "B", "SIM"]
 ignore = ["E501"]
 
 [tool.ruff.lint.isort]
-known-first-party = ["*"]
+known-first-party = ["deadcode"]

src/deadcode/__main__.py

@@ -1,5 +1,5 @@
 """Allow running deadcode as: python -m deadcode"""
-from deadcode.cli import cli
+from .cli import cli
 
 if __name__ == "__main__":
     cli()

src/deadcode/cli.py

@@ -2,34 +2,33 @@
 
 from __future__ import annotations
 
-import click
 import json
 import sys
 from pathlib import Path
+
+import click
 from rich.console import Console
 from rich.table import Table
 
-try:
-    from revenueholdings_license import require_license
-except ImportError:
-    require_license = None
-
 from . import __version__
 from .config import DeadCodeConfig
 from .scanner import DeadCodeScanner, Finding
 
 console = Console()
 err_console = Console(stderr=True)
 
+FORMAT_HELP = "Output format: pretty (default), compact, github, or json"
 ALL_CATEGORIES = ["unused_export", "dead_route", "orphaned_css", "unreferenced_component"]
+FORMAT_CHOICES = click.Choice(["pretty", "compact", "github", "json"])
 
 
 @click.group()
 @click.option("--project", "-p", default=".", help="Project directory to scan")
 @click.option("--ignore", "-i", multiple=True, help="Additional ignore patterns (gitignore-style)")
+@click.option("--include", multiple=True, help="Include only matching files (gitignore-style whitelist)")
 @click.version_option(__version__, prog_name="deadcode")
 @click.pass_context
-def cli(ctx: click.Context, project: str, ignore: tuple[str, ...]) -> None:
+def cli(ctx: click.Context, project: str, ignore: tuple[str, ...], include: tuple[str, ...]) -> None:
     """DeadCode — Find and remove dead code in TS/React/Next.js projects.
 
     Scans for unused exports, dead routes, orphaned CSS classes,
@@ -38,6 +37,7 @@ def cli(ctx: click.Context, project: str, ignore: tuple[str, ...]) -> None:
     ctx.ensure_object(dict)
     ctx.obj["project"] = project
     ctx.obj["ignore"] = list(ignore) if ignore else None
+    ctx.obj["include"] = list(include) if include else None
     # Load .deadcode.yml config
     ctx.obj["config"] = DeadCodeConfig.load(project)
 
@@ -67,23 +67,29 @@ def _get_fail_threshold(ctx: click.Context) -> int:
 
 
 @cli.command()
-@click.option("--json-output", "-j", is_flag=True, help="Output as JSON")
+@click.option("--json-output", "-j", is_flag=True, help="Alias for --format=json (deprecated)")
+@click.option("--format", type=FORMAT_CHOICES, default="pretty", help=FORMAT_HELP)
 @click.option("--category", "-c", type=click.Choice(ALL_CATEGORIES), default=None, help="Filter by category")
 @click.option("--fail", "fail_threshold", type=int, default=None,
               help="Exit code 1 if findings >= threshold (overrides .deadcode.yml)")
 @click.pass_context
-def scan(ctx: click.Context, json_output: bool, category: str | None, fail_threshold: int | None) -> None:
+def scan(
+    ctx: click.Context,
+    json_output: bool,
+    format: str | None,
+    category: str | None,
+    fail_threshold: int | None,
+) -> None:
     """Scan project for dead code."""
-    if require_license:
-        require_license("deadcode")
     project = ctx.obj["project"]
     ignore = _merge_config_ignore(ctx)
 
     if not Path(project).exists():
         err_console.print(f"[red]Project directory '{project}' not found.[/red]")
         sys.exit(1)
 
-    scanner = DeadCodeScanner(project, ignore_patterns=ignore)
+    include_patterns = ctx.obj.get("include")
+    scanner = DeadCodeScanner(project, ignore_patterns=ignore, include_patterns=include_patterns)
     result = scanner.scan()
 
     # Filter by category
@@ -96,7 +102,10 @@ def scan(ctx: click.Context, json_output: bool, category: str | None, fail_thres
     if not category and config and config.categories:
         findings = [f for f in findings if f.category in config.categories]
 
-    if json_output:
+    # Determine effective format (legacy --json-output maps to json)
+    effective_format = "json" if json_output else (format or "pretty")
+
+    if effective_format == "json":
         output = {
             "files_scanned": result.files_scanned,
             "findings": [
@@ -107,6 +116,26 @@ def scan(ctx: click.Context, json_output: bool, category: str | None, fail_thres
             "errors": result.errors,
         }
         console.print(json.dumps(output, indent=2, default=str))
+    elif effective_format == "compact":
+        if not findings:
+            console.print("OK — 0 findings")
+        else:
+            for f in findings:
+                console.print(f"{f.file}:{f.line} \u2014 {f.category}: {f.name}")
+            console.print(f"\n{len(findings)} findings")
+    elif effective_format == "github":
+        # GitHub Actions annotation syntax
+        # ::warning file={name},line={line},endLine={line}::{message}
+        if not findings:
+            console.print("deadcode: 0 findings")
+        else:
+            for f in findings:
+                level = "error" if f.removable else "warning"
+                msg = f"{f.category}: {f.name}"
+                if f.detail:
+                    msg += f" ({f.detail[:120]})"
+                console.print(f"::{level} file={f.file},line={f.line}::{msg}")
+            console.print(f"\n::notice::deadcode: {len(findings)} findings")
     else:
         # Summary
         console.print(f"\n[bold]DeadCode Scan[/bold] — {result.files_scanned} files scanned\n")
@@ -153,7 +182,7 @@ def scan(ctx: click.Context, json_output: bool, category: str | None, fail_thres
     # CI fail threshold
     effective_threshold = fail_threshold if fail_threshold is not None else _get_fail_threshold(ctx)
     if effective_threshold >= 0 and len(findings) >= effective_threshold:
-        if not json_output:
+        if effective_format not in ("json", "github"):
             console.print(f"\n[red]FAIL: {len(findings)} findings >= threshold {effective_threshold}[/red]")
         sys.exit(1)
 
@@ -175,13 +204,18 @@ def remove(ctx: click.Context, dry_run: bool, category: str | None) -> None:
     project = ctx.obj["project"]
     ignore = _merge_config_ignore(ctx)
 
+    if not Path(project).exists():
+        err_console.print(f"[red]Project directory '{project}' not found.[/red]")
+        sys.exit(1)
+
     if not dry_run:
         console.print("[red]WARNING: This will modify files. Use --dry-run first![/red]")
         console.print("[dim]Press Ctrl+C to abort. Running in 3 seconds...[/dim]")
         import time
         time.sleep(3)
 
-    scanner = DeadCodeScanner(project, ignore_patterns=ignore)
+    include_patterns = ctx.obj.get("include")
+    scanner = DeadCodeScanner(project, ignore_patterns=ignore, include_patterns=include_patterns)
     result = scanner.scan()
 
     findings = result.findings
@@ -246,11 +280,10 @@ def remove(ctx: click.Context, dry_run: bool, category: str | None) -> None:
 @click.pass_context
 def stats(ctx: click.Context) -> None:
     """Show quick stats about the project's dead code."""
-    if require_license:
-        require_license("deadcode")
     project = ctx.obj["project"]
     ignore = _merge_config_ignore(ctx)
-    scanner = DeadCodeScanner(project, ignore_patterns=ignore)
+    include_patterns = ctx.obj.get("include")
+    scanner = DeadCodeScanner(project, ignore_patterns=ignore, include_patterns=include_patterns)
     result = scanner.scan()
 
     console.print(f"Files scanned: [bold]{result.files_scanned}[/bold]")

src/deadcode/py.typed

@@ -10,11 +10,12 @@
 from __future__ import annotations
 
 import os
-import pathspec
 import re
 from dataclasses import dataclass, field
 from pathlib import Path
 
+import pathspec
+
 # ── Data structures ───────────────────────────────────────────────────