@kyo-so/cli 0.12.0 → 0.13.0

package/dist/bin/kyoso.js

@@ -183944,13 +183944,14 @@ function matchesPathPattern(path, patterns, mode) {
 }
 
 // src/core/constants.ts
-var DEFAULT_AGENT_TIMEOUT_MS = 120000;
+var DEFAULT_AGENT_TIMEOUT_MS = 600000;
+var DEFAULT_WARN_AGENT_OUTPUT_BYTES = 524288;
 var MAX_AGENT_OUTPUT_BYTES = 1048576;
 var JUDGE_MAX_OUTPUT_TOKENS = 4096;
 var RAW_OUTPUT_MAX_CHARS = 16384;
 var TRACE_DIR = ".kyoso/traces";
 var KYOSO_CHILD_AGENT = "KYOSO_CHILD_AGENT";
-var KYOSO_VERSION = "0.12.0";
+var KYOSO_VERSION = "0.13.0";
 
 // src/utils/pathContainment.ts
 import { resolve, sep as sep2 } from "node:path";
@@ -184255,9 +184256,9 @@ var defaultConfig = {
       enabled: true,
       type: "acp",
       command: "npx",
-      args: ["-y", "@agentclientprotocol/codex-acp@1.1.2"],
+      args: ["-y", "@agentclientprotocol/codex-acp@1.1.4"],
       role: "implementation_reviewer",
-      timeoutMs: 120000,
+      timeoutMs: DEFAULT_AGENT_TIMEOUT_MS,
       allowProjectProvider: [],
       env: {
         INITIAL_AGENT_MODE: "read-only",
@@ -184282,7 +184283,7 @@ var defaultConfig = {
       command: "npx",
       args: ["-y", "@agentclientprotocol/claude-agent-acp@0.58.1"],
       role: "architecture_security_reviewer",
-      timeoutMs: 300000,
+      timeoutMs: DEFAULT_AGENT_TIMEOUT_MS,
       env: {
         KYOSO_CHILD_AGENT: "1"
       },
@@ -184363,10 +184364,11 @@ var defaultConfig = {
   },
   reviewBudget: {
     maxModelCalls: 4,
-    maxTotalWallTimeMs: 480000,
-    maxAgentOutputBytes: 65536,
+    maxTotalWallTimeMs: 660000,
+    warnAgentOutputBytes: DEFAULT_WARN_AGENT_OUTPUT_BYTES,
+    maxAgentOutputBytes: 1048576,
     maxFindingsPerAgent: 10,
-    skipOptionalPhasesWhenTokenUsageUnknown: true
+    skipOptionalPhasesWhenTokenUsageUnknown: false
   },
   audit: {
     enabled: true,
@@ -184724,7 +184726,7 @@ var baseAgentSchema = exports_external.object({
     "architecture_security_reviewer",
     "combined_reviewer"
   ]),
-  timeoutMs: exports_external.number().int().positive().default(120000),
+  timeoutMs: exports_external.number().int().positive().default(DEFAULT_AGENT_TIMEOUT_MS),
   env: exports_external.record(exports_external.string(), exports_external.string()).default({}),
   auth: exports_external.object({
     mode: exports_external.literal("passthrough").default("passthrough"),
@@ -184755,6 +184757,7 @@ var codexAgentSchema = baseAgentSchema.extend({
 var reviewBudgetSchema = exports_external.object({
   maxModelCalls: exports_external.number().int().positive(),
   maxTotalWallTimeMs: exports_external.number().int().positive(),
+  warnAgentOutputBytes: exports_external.number().int().positive().max(MAX_AGENT_OUTPUT_BYTES),
   maxAgentOutputBytes: exports_external.number().int().positive().max(MAX_AGENT_OUTPUT_BYTES),
   maxFindingsPerAgent: exports_external.number().int().positive(),
   skipOptionalPhasesWhenTokenUsageUnknown: exports_external.boolean()
@@ -184830,13 +184833,21 @@ var kyosoConfigSchema = exports_external.object({
   })
 }).superRefine((config2, context) => {
   const enabledPrimaryReviewers = Object.values(config2.agents).filter((agent) => agent.enabled).length;
-  if (config2.reviewBudget.maxModelCalls >= enabledPrimaryReviewers)
-    return;
-  context.addIssue({
-    code: exports_external.ZodIssueCode.custom,
-    path: ["reviewBudget", "maxModelCalls"],
-    message: "must be greater than or equal to the number of enabled primary reviewers."
-  });
+  if (config2.reviewBudget.maxModelCalls < enabledPrimaryReviewers) {
+    context.addIssue({
+      code: exports_external.ZodIssueCode.custom,
+      path: ["reviewBudget", "maxModelCalls"],
+      message: "must be greater than or equal to the number of enabled primary reviewers."
+    });
+  }
+  const inheritedLegacyHardLimit = config2.reviewBudget.warnAgentOutputBytes === DEFAULT_WARN_AGENT_OUTPUT_BYTES && config2.reviewBudget.maxAgentOutputBytes <= DEFAULT_WARN_AGENT_OUTPUT_BYTES;
+  if (config2.reviewBudget.warnAgentOutputBytes >= config2.reviewBudget.maxAgentOutputBytes && !inheritedLegacyHardLimit) {
+    context.addIssue({
+      code: exports_external.ZodIssueCode.custom,
+      path: ["reviewBudget", "warnAgentOutputBytes"],
+      message: "must be less than reviewBudget.maxAgentOutputBytes."
+    });
+  }
 });
 function agentConfigLeafPaths(agent) {
   const paths = [
@@ -184899,6 +184910,7 @@ var kyosoConfigKnownLeafPaths = [
   "verification.allowDemotion",
   "reviewBudget.maxModelCalls",
   "reviewBudget.maxTotalWallTimeMs",
+  "reviewBudget.warnAgentOutputBytes",
   "reviewBudget.maxAgentOutputBytes",
   "reviewBudget.maxFindingsPerAgent",
   "reviewBudget.skipOptionalPhasesWhenTokenUsageUnknown",
@@ -186033,6 +186045,7 @@ async function loadConfig(options = {}) {
   if (!options.ignoreConfig) {
     if (await exists2(globalConfigPath)) {
       const globalConfig2 = await loadTomlConfigFile(globalConfigPath);
+      validateExplicitReviewBudgetThresholds(globalConfig2, defaultConfig);
       const globalConfigWarnings = collectGlobalConfigWarnings(globalConfigPath, globalConfig2);
       const securitySensitiveWarnings = globalConfigWarnings.filter((warning) => warning.startsWith("security-sensitive unknown settings "));
       if (securitySensitiveWarnings.length > 0 && !options.allowUnknownConfig) {
@@ -186281,6 +186294,7 @@ async function loadProjectTsConfig(input2) {
   });
   if (trustDecision.execute) {
     const userConfig = await loadUserConfig(canonicalPath, source);
+    validateExplicitReviewBudgetThresholds(userConfig, input2.baseConfig);
     const projectChangesOpenRouterRoute = projectConfigChangesOpenRouterRoute(userConfig, input2.baseConfig);
     await assertProjectOpenRouterAuthorization({
       projectConfig: userConfig,
@@ -186374,6 +186388,23 @@ function deepMerge2(base, override) {
   }
   return result;
 }
+function validateExplicitReviewBudgetThresholds(config2, baseConfig) {
+  const reviewBudget = readRecord(config2, "reviewBudget");
+  if (!reviewBudget || !Object.prototype.hasOwnProperty.call(reviewBudget, "warnAgentOutputBytes")) {
+    return;
+  }
+  const warnAgentOutputBytes = reviewBudget.warnAgentOutputBytes;
+  const maxAgentOutputBytes = Object.prototype.hasOwnProperty.call(reviewBudget, "maxAgentOutputBytes") ? reviewBudget.maxAgentOutputBytes : readRecord(baseConfig, "reviewBudget")?.maxAgentOutputBytes;
+  if (typeof warnAgentOutputBytes === "number" && typeof maxAgentOutputBytes === "number" && warnAgentOutputBytes >= maxAgentOutputBytes) {
+    throw new Error("reviewBudget.warnAgentOutputBytes must be less than reviewBudget.maxAgentOutputBytes.");
+  }
+}
+function readRecord(value, key) {
+  if (!isRecord3(value))
+    return;
+  const nested = value[key];
+  return isRecord3(nested) ? nested : undefined;
+}
 function isRecord3(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
@@ -186386,6 +186417,55 @@ async function exists2(path) {
   }
 }
 
+// src/core/modelExecutionIdentity.ts
+var MODEL_EXECUTION_IDENTITY_MAX_CHARS = 160;
+var MODEL_PROVIDER_ROUTES = new Set([
+  "codex_default",
+  "claude_default",
+  "openrouter",
+  "openai",
+  "anthropic"
+]);
+function createModelExecutionIdentity(input2) {
+  const requestedModel = sanitizeIdentityValue(input2.requestedModel);
+  const reportedProvider = sanitizeIdentityValue(input2.reportedProvider);
+  const reportedModel = sanitizeIdentityValue(input2.reportedModel);
+  const reportingStatus = reportedProvider !== undefined || reportedModel !== undefined ? "reported" : requestedModel !== undefined ? "requested_only" : "unknown";
+  return {
+    providerRoute: input2.providerRoute,
+    ...requestedModel ? { requestedModel } : {},
+    ...reportedProvider ? { reportedProvider } : {},
+    ...reportedModel ? { reportedModel } : {},
+    reportingStatus
+  };
+}
+function normalizeModelExecutionIdentity(value) {
+  if (!isRecord4(value) || !isModelProviderRoute(value.providerRoute)) {
+    return;
+  }
+  return createModelExecutionIdentity({
+    providerRoute: value.providerRoute,
+    requestedModel: value.requestedModel,
+    reportedProvider: value.reportedProvider,
+    reportedModel: value.reportedModel
+  });
+}
+function sanitizeIdentityValue(value) {
+  if (typeof value !== "string")
+    return;
+  const sanitized = sanitizeTextForDisplay(value, MODEL_EXECUTION_IDENTITY_MAX_CHARS);
+  if (sanitized.includes(REDACTION) || /(?:https?|wss?):\/\//i.test(sanitized) || /\b(?:api[_-]?key|base[_-]?url|credential|secret|token|password)\b/i.test(sanitized) || /[{}=]/.test(sanitized)) {
+    return;
+  }
+  return sanitized.length > 0 ? sanitized : undefined;
+}
+function isModelProviderRoute(value) {
+  return typeof value === "string" && MODEL_PROVIDER_ROUTES.has(value);
+}
+function isRecord4(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+
 // src/core/tokenUsage.ts
 var TOKEN_USAGE_KEYS = [
   "totalTokens",
@@ -186396,7 +186476,7 @@ var TOKEN_USAGE_KEYS = [
   "cachedWriteTokens"
 ];
 function normalizeModelTokenUsage(usage) {
-  if (!isRecord4(usage))
+  if (!isRecord5(usage))
     return;
   const normalized = {};
   for (const key of TOKEN_USAGE_KEYS) {
@@ -186409,7 +186489,7 @@ function normalizeModelTokenUsage(usage) {
 function isTokenCount(value) {
   return typeof value === "number" && Number.isSafeInteger(value) && value >= 0;
 }
-function isRecord4(value) {
+function isRecord5(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 
@@ -186461,7 +186541,7 @@ function parseJudgeOutput(text, fallbackSummaryText) {
   const parsed = JSON.parse(json2);
   const summaryText = typeof parsed.summaryText === "string" && parsed.summaryText.trim().length > 0 ? sanitizeText(parsed.summaryText) : fallbackSummaryText;
   const disagreementComments = Array.isArray(parsed.disagreementComments) ? parsed.disagreementComments.flatMap((item) => {
-    if (!isRecord5(item) || typeof item.topic !== "string" || typeof item.judgeComment !== "string") {
+    if (!isRecord6(item) || typeof item.topic !== "string" || typeof item.judgeComment !== "string") {
       return [];
     }
     return [
@@ -186477,7 +186557,7 @@ function parseJudgeOutput(text, fallbackSummaryText) {
   return { summaryText, disagreementComments, analysis };
 }
 function parseAnalysis(value) {
-  if (!isRecord5(value))
+  if (!isRecord6(value))
     return;
   if (!Array.isArray(value.blindSpots) || !Array.isArray(value.contradictions) || !Array.isArray(value.partialCoverage)) {
     return;
@@ -186485,7 +186565,7 @@ function parseAnalysis(value) {
   return {
     blindSpots: value.blindSpots.slice(0, ANALYSIS_MAX_ITEMS).flatMap((item) => typeof item === "string" ? [sanitizeAnalysisText(item)] : []),
     contradictions: value.contradictions.slice(0, ANALYSIS_MAX_ITEMS).flatMap((item) => {
-      if (!isRecord5(item) || typeof item.topic !== "string" || typeof item.detail !== "string") {
+      if (!isRecord6(item) || typeof item.topic !== "string" || typeof item.detail !== "string") {
         return [];
       }
       return [
@@ -186496,7 +186576,7 @@ function parseAnalysis(value) {
       ];
     }),
     partialCoverage: value.partialCoverage.slice(0, ANALYSIS_MAX_ITEMS).flatMap((item) => {
-      if (!isRecord5(item) || typeof item.note !== "string")
+      if (!isRecord6(item) || typeof item.note !== "string")
         return [];
       const findingId = typeof item.findingId === "string" ? sanitizeAnalysisText(item.findingId) : undefined;
       return [
@@ -186543,15 +186623,20 @@ function extractFirstJsonObject(text) {
   }
   return;
 }
-function isRecord5(value) {
+function isRecord6(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 
 // src/judge/anthropic.ts
+var DEFAULT_ANTHROPIC_JUDGE_MODEL = "claude-haiku-4-5";
+function resolveAnthropicJudgeModel(env) {
+  return env.KYOSO_ANTHROPIC_JUDGE_MODEL ?? DEFAULT_ANTHROPIC_JUDGE_MODEL;
+}
 async function runAnthropicJudge(input2, timeoutMs) {
   const apiKey = input2.env.ANTHROPIC_API_KEY;
   if (!apiKey)
     throw new Error("ANTHROPIC_API_KEY is not configured.");
+  const requestedModel = resolveAnthropicJudgeModel(input2.env);
   const response = await fetchWithTimeout(`${input2.env.ANTHROPIC_BASE_URL ?? "https://api.anthropic.com"}/v1/messages`, {
     method: "POST",
     headers: {
@@ -186560,7 +186645,7 @@ async function runAnthropicJudge(input2, timeoutMs) {
       "content-type": "application/json"
     },
     body: JSON.stringify({
-      model: input2.env.KYOSO_ANTHROPIC_JUDGE_MODEL ?? "claude-haiku-4-5",
+      model: requestedModel,
       max_tokens: JUDGE_MAX_OUTPUT_TOKENS,
       temperature: 0,
       messages: [
@@ -186578,8 +186663,11 @@ async function runAnthropicJudge(input2, timeoutMs) {
   if (!content)
     throw new Error("Anthropic judge response did not include text content.");
   const usage = normalizeUsage(payload.usage);
+  const reportedModel = typeof payload.model === "string" ? payload.model : undefined;
   return {
     output: parseJudgeOutput(content, input2.summaryText),
+    requestedModel,
+    ...reportedModel ? { reportedModel } : {},
     ...usage ? { usage } : {}
   };
 }
@@ -186616,10 +186704,15 @@ function runDeterministicJudge(result, summaryText) {
 }
 
 // src/judge/openai.ts
+var DEFAULT_OPENAI_JUDGE_MODEL = "gpt-5.4-mini";
+function resolveOpenAiJudgeModel(env) {
+  return env.KYOSO_OPENAI_JUDGE_MODEL ?? DEFAULT_OPENAI_JUDGE_MODEL;
+}
 async function runOpenAiJudge(input2, timeoutMs) {
   const apiKey = input2.env.OPENAI_API_KEY ?? input2.env.CODEX_API_KEY;
   if (!apiKey)
     throw new Error("OPENAI_API_KEY is not configured.");
+  const requestedModel = resolveOpenAiJudgeModel(input2.env);
   const response = await fetchWithTimeout2(`${input2.env.OPENAI_BASE_URL ?? "https://api.openai.com/v1"}/chat/completions`, {
     method: "POST",
     headers: {
@@ -186627,7 +186720,7 @@ async function runOpenAiJudge(input2, timeoutMs) {
       "content-type": "application/json"
     },
     body: JSON.stringify({
-      model: input2.env.KYOSO_OPENAI_JUDGE_MODEL ?? "gpt-5.4-mini",
+      model: requestedModel,
       response_format: { type: "json_object" },
       messages: [
         {
@@ -186646,8 +186739,11 @@ async function runOpenAiJudge(input2, timeoutMs) {
   if (!content)
     throw new Error("OpenAI judge response did not include content.");
   const usage = normalizeUsage2(payload.usage);
+  const reportedModel = typeof payload.model === "string" ? payload.model : undefined;
   return {
     output: parseJudgeOutput(content, input2.summaryText),
+    requestedModel,
+    ...reportedModel ? { reportedModel } : {},
     ...usage ? { usage } : {}
   };
 }
@@ -186687,26 +186783,41 @@ function resolveJudgeProvider(provider, env) {
     return "anthropic";
   return "deterministic_fallback";
 }
+function resolveJudgeCallRoute(mode, provider, env) {
+  const resolvedProvider = resolveJudgeProvider(provider, env);
+  const credentialAvailable = resolvedProvider === "openai" && (hasEnv(env, "OPENAI_API_KEY") || hasEnv(env, "CODEX_API_KEY")) || resolvedProvider === "anthropic" && hasEnv(env, "ANTHROPIC_API_KEY");
+  return {
+    provider: resolvedProvider,
+    llmAvailable: mode === "deterministic_plus_llm" && credentialAvailable
+  };
+}
 async function runJudge(input2) {
   const fallback = runDeterministicJudge(input2.result, input2.summaryText);
-  if (input2.config.mode === "deterministic_only") {
+  const configuredProvider = input2.requestedProvider ?? input2.config.provider;
+  const route = resolveJudgeCallRoute(input2.config.mode, configuredProvider, input2.env);
+  if (!route.llmAvailable) {
     return {
       provider: "deterministic_fallback",
       status: "deterministic_fallback",
       output: fallback
     };
   }
-  const configuredProvider = input2.requestedProvider ?? input2.config.provider;
-  const provider = resolveJudgeProvider(configuredProvider, input2.env);
-  if (provider === "deterministic_fallback") {
-    return { provider, status: "deterministic_fallback", output: fallback };
-  }
+  const provider = route.provider;
+  const requestExecutionIdentity = createModelExecutionIdentity({
+    providerRoute: provider === "openai" ? "openai" : "anthropic",
+    requestedModel: provider === "openai" ? resolveOpenAiJudgeModel(input2.env) : resolveAnthropicJudgeModel(input2.env)
+  });
   try {
     const output2 = provider === "openai" ? await runOpenAiJudge(input2, input2.timeoutMs ?? input2.config.timeoutMs) : await runAnthropicJudge(input2, input2.timeoutMs ?? input2.config.timeoutMs);
     return {
       provider,
       status: "completed",
       output: output2.output,
+      executionIdentity: createModelExecutionIdentity({
+        providerRoute: requestExecutionIdentity.providerRoute,
+        requestedModel: output2.requestedModel,
+        reportedModel: output2.reportedModel
+      }),
       ...output2.usage ? { usage: output2.usage } : {}
     };
   } catch (error51) {
@@ -186714,6 +186825,7 @@ async function runJudge(input2) {
       provider,
       status: "failed_fallback",
       output: fallback,
+      executionIdentity: requestExecutionIdentity,
       error: error51 instanceof Error ? error51.message : String(error51)
     };
   }
@@ -186771,7 +186883,19 @@ class ChildEnvPreflightError extends Error {
     this.name = "ChildEnvPreflightError";
   }
 }
-function buildChildEnv(parentEnv, whitelist, explicit, options = {}) {
+function buildChildLaunchContext(parentEnv, whitelist, explicit, options) {
+  const env = buildChildEnvironment(parentEnv, whitelist, explicit, options);
+  const openRouterSelected = options.agent === "codex" && options.provider === CODEX_OPENROUTER_PROVIDER;
+  const requestedModel = options.agent === "claude" ? env.ANTHROPIC_MODEL : readCodexRequestedModel(env.CODEX_CONFIG);
+  return {
+    env,
+    executionIdentity: createModelExecutionIdentity({
+      providerRoute: openRouterSelected ? "openrouter" : options.agent === "codex" ? "codex_default" : "claude_default",
+      requestedModel
+    })
+  };
+}
+function buildChildEnvironment(parentEnv, whitelist, explicit, options = {}) {
   if (!parentEnv.PATH) {
     throw new Error("PATH is required to launch ACP child agents.");
   }
@@ -186818,6 +186942,19 @@ function buildChildEnv(parentEnv, whitelist, explicit, options = {}) {
   }
   return env;
 }
+function readCodexRequestedModel(value) {
+  if (!value)
+    return;
+  try {
+    const parsed = JSON.parse(value);
+    if (!isPlainObject2(parsed) || typeof parsed.model !== "string") {
+      return;
+    }
+    return parsed.model;
+  } catch {
+    return;
+  }
+}
 function canCopyEnvValue(key, value, onCredentialPlaceholderDiscarded) {
   if (!isUnexpandedCredentialEnvValue(key, value))
     return true;
@@ -186959,9 +187096,9 @@ var PLUGIN_RUNTIME_COMPATIBILITY_SCHEMA_VERSION = 1;
 var MINIMUM_SUPPORTED_CODEX_VERSION = "0.144.0-alpha.4";
 var PLUGIN_RUNTIME_EXPECTED_CONTRACT = {
   distribution: {
-    pluginVersion: "0.5.0",
+    pluginVersion: "0.6.0",
     mcpCommand: "npx",
-    mcpPackagePin: "@kyo-so/cli@0.11.0"
+    mcpPackagePin: "@kyo-so/cli@0.12.0"
   },
   marketplace: {
     name: "kyoso",
@@ -186995,7 +187132,7 @@ var PLUGIN_RUNTIME_EXPECTED_CONTRACT = {
       ],
       cwd: null,
       startupTimeoutSec: 20,
-      toolTimeoutSec: 360
+      toolTimeoutSec: 2160
     },
     pluginOverride: {
       enabled: false,
@@ -187012,7 +187149,7 @@ var PLUGIN_RUNTIME_EXPECTED_CONTRACT = {
       ],
       cwd: null,
       startupTimeoutSec: 20,
-      toolTimeoutSec: 360
+      toolTimeoutSec: 2160
     },
     manualOverride: {
       enabled: true,
@@ -187206,7 +187343,7 @@ function parseJson(value) {
   }
 }
 function parsePluginList(value) {
-  if (!isRecord6(value))
+  if (!isRecord7(value))
     return;
   const allowedKeys = new Set(PLUGIN_LIST_JSON_SCHEMA.collections);
   if (Object.keys(value).some((key) => !allowedKeys.has(key))) {
@@ -187234,7 +187371,7 @@ function parsePluginEntries(value) {
     return;
   const entries = [];
   for (const item of value) {
-    if (!isRecord6(item))
+    if (!isRecord7(item))
       return;
     if (typeof item.pluginId !== "string" || typeof item.installed !== "boolean" || typeof item.enabled !== "boolean") {
       return;
@@ -187260,7 +187397,7 @@ function parseMcpList(value) {
     return;
   const matches = [];
   for (const item of value) {
-    if (!isRecord6(item) || typeof item.name !== "string")
+    if (!isRecord7(item) || typeof item.name !== "string")
       return "unknown";
     if (item.name !== "kyoso")
       continue;
@@ -187342,7 +187479,7 @@ function comparePrerelease(left, right) {
   }
   return 0;
 }
-function isRecord6(value) {
+function isRecord7(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 
@@ -187448,7 +187585,7 @@ function findKyosoPackage(executable) {
     if (existsSync(packagePath)) {
       try {
         const parsed = JSON.parse(readFileSync(packagePath, "utf8"));
-        if (isRecord7(parsed) && parsed.name === "@kyo-so/cli" && typeof parsed.version === "string" && parsed.version.trim().length > 0) {
+        if (isRecord8(parsed) && parsed.name === "@kyo-so/cli" && typeof parsed.version === "string" && parsed.version.trim().length > 0) {
           return { directory, version: parsed.version };
         }
       } catch {}
@@ -187534,7 +187671,7 @@ function isWithin(path, parent) {
   const relativePath = relative(resolve5(parent), resolve5(path));
   return relativePath === "" || !relativePath.startsWith(`..${process.platform === "win32" ? "\\" : "/"}`) && relativePath !== ".." && !isAbsolute4(relativePath);
 }
-function isRecord7(value) {
+function isRecord8(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 
@@ -188165,7 +188302,7 @@ function buildCodexMcpToml(command, withOpenRouter = false) {
     `args = ${JSON.stringify(command.args)}`,
     `env_vars = [${envVars.map((value) => JSON.stringify(value)).join(", ")}]`,
     "startup_timeout_sec = 20",
-    "tool_timeout_sec = 360",
+    "tool_timeout_sec = 2160",
     "enabled = true",
     ""
   ].join(`
@@ -188331,7 +188468,7 @@ async function ensureClaudeMcp(context) {
   const configPath = join6(context.cwd, ".mcp.json");
   const current = await readJsonObject(configPath);
   const mcpServers = recordValue(current.mcpServers);
-  if (isRecord8(mcpServers.kyoso)) {
+  if (isRecord9(mcpServers.kyoso)) {
     return {
       kind: "mcp",
       registration: "preserved",
@@ -188571,7 +188708,7 @@ async function readJsonObject(path) {
   if (content.trim().length === 0)
     return {};
   const parsed = JSON.parse(content);
-  if (!isRecord8(parsed))
+  if (!isRecord9(parsed))
     throw new Error(`${path} must contain a JSON object`);
   return parsed;
 }
@@ -188581,9 +188718,9 @@ function hasCodexMcpContent(content) {
 function codexMcpStatusFromContent(content) {
   try {
     const parsed = parse5(content);
-    if (!isRecord8(parsed))
+    if (!isRecord9(parsed))
       return "unknown";
-    if (!isRecord8(parsed.mcp_servers))
+    if (!isRecord9(parsed.mcp_servers))
       return "missing";
     if (!("kyoso" in parsed.mcp_servers))
       return "missing";
@@ -188612,11 +188749,11 @@ function detectCodexMcp(path, cwd, home) {
     if (hasUnprobedProjectIntegrationOverride(parsed, cwd, home)) {
       return { status: "unknown", paths: [path] };
     }
-    if (!isRecord8(parsed))
+    if (!isRecord9(parsed))
       return { status: "unknown", paths: [path] };
     if (!("mcp_servers" in parsed))
       return { status: "missing", paths: [] };
-    if (!isRecord8(parsed.mcp_servers)) {
+    if (!isRecord9(parsed.mcp_servers)) {
       return { status: "unknown", paths: [path] };
     }
     if (!("kyoso" in parsed.mcp_servers)) {
@@ -188641,18 +188778,18 @@ function detectClaudeMcp(path, cwd, home) {
   }
 }
 function jsonMcpStatuses(value, cwd, home) {
-  if (!isRecord8(value))
+  if (!isRecord9(value))
     return ["unknown"];
   const statuses = directMcpStatuses(value);
   if (!("projects" in value))
     return statuses;
-  if (!isRecord8(value.projects))
+  if (!isRecord9(value.projects))
     return [...statuses, "unknown"];
   const currentProject = normalizeProjectPath(cwd, home);
   for (const [projectPath, projectConfig] of Object.entries(value.projects)) {
     if (normalizeProjectPath(projectPath, home) !== currentProject)
       continue;
-    if (!isRecord8(projectConfig)) {
+    if (!isRecord9(projectConfig)) {
       statuses.push("unknown");
       continue;
     }
@@ -188663,7 +188800,7 @@ function jsonMcpStatuses(value, cwd, home) {
 function directMcpStatuses(value) {
   const statuses = [];
   if ("mcpServers" in value) {
-    if (!isRecord8(value.mcpServers)) {
+    if (!isRecord9(value.mcpServers)) {
       statuses.push("unknown");
     } else if ("kyoso" in value.mcpServers) {
       statuses.push(mcpEntryStatus(value.mcpServers.kyoso));
@@ -188674,7 +188811,7 @@ function directMcpStatuses(value) {
 function nestedMcpEntryStatus(value, path) {
   let current = value;
   for (const key of path) {
-    if (!isRecord8(current))
+    if (!isRecord9(current))
       return "unknown";
     if (!(key in current))
       return "missing";
@@ -188683,11 +188820,11 @@ function nestedMcpEntryStatus(value, path) {
   return mcpEntryStatus(current);
 }
 function hasUnprobedProjectIntegrationOverride(value, cwd, home) {
-  if (!isRecord8(value) || !isRecord8(value.projects))
+  if (!isRecord9(value) || !isRecord9(value.projects))
     return false;
   const currentProject = normalizeProjectPath(cwd, home);
   for (const [projectPath, projectConfig] of Object.entries(value.projects)) {
-    if (normalizeProjectPath(projectPath, home) !== currentProject || !isRecord8(projectConfig)) {
+    if (normalizeProjectPath(projectPath, home) !== currentProject || !isRecord9(projectConfig)) {
       continue;
     }
     if ("mcp_servers" in projectConfig || "plugins" in projectConfig) {
@@ -188710,7 +188847,7 @@ function normalizeProjectPath(path, home) {
   return process.platform === "win32" ? normalized.toLowerCase() : normalized;
 }
 function mcpEntryStatus(value) {
-  if (!isRecord8(value))
+  if (!isRecord9(value))
     return "unknown";
   if (!("enabled" in value))
     return "enabled";
@@ -188744,7 +188881,7 @@ function readTextSync(path) {
 function recordValue(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value) ? value : {};
 }
-function isRecord8(value) {
+function isRecord9(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function diffForAppend(path, snippet) {
@@ -188934,7 +189071,16 @@ async function runDoctor(options) {
     const remaining = agentCommandExists.codex ? "codex" : "claude";
     lines.push(`  single-agent mode: set agents.${missing}.enabled: false to use ${remaining} only; the remaining agent will cover both review roles.`);
   }
-  const judgeProvider = loaded.config.judge.mode === "deterministic_only" ? "deterministic_fallback" : resolveJudgeProvider(loaded.config.judge.provider, env);
+  const judgeRoute = resolveJudgeCallRoute(loaded.config.judge.mode, loaded.config.judge.provider, env);
+  const reviewTiming = calculateReviewTiming(loaded.config, judgeRoute.llmAvailable);
+  lines.push("", "Review timing");
+  lines.push(`  review-wide deadline: ${loaded.config.reviewBudget.maxTotalWallTimeMs} ms`, `  sequential phases: primary ${reviewTiming.primaryPhaseMs} + verification ${reviewTiming.verificationPhaseMs} + LLM judge ${reviewTiming.judgePhaseMs} = ${reviewTiming.sequentialPhaseMs} ms`, `  recommended review-wide deadline: ${reviewTiming.recommendedReviewWallTimeMs} ms`);
+  if (loaded.config.reviewBudget.maxTotalWallTimeMs < reviewTiming.sequentialPhaseMs) {
+    lines.push(`  warning: review-wide deadline is insufficient: ${loaded.config.reviewBudget.maxTotalWallTimeMs} ms is below the configured sequential phase time of ${reviewTiming.sequentialPhaseMs} ms; later phases cannot receive their configured timeout.`, `  hint: set user-global reviewBudget.maxTotalWallTimeMs to at least ${reviewTiming.recommendedReviewWallTimeMs}.`);
+  } else if (loaded.config.reviewBudget.maxTotalWallTimeMs < reviewTiming.recommendedReviewWallTimeMs) {
+    lines.push(`  warning: review-wide deadline has low margin: ${loaded.config.reviewBudget.maxTotalWallTimeMs} ms is below the recommended ${reviewTiming.recommendedReviewWallTimeMs} ms; scheduling and finalization margin is reduced.`, `  hint: set user-global reviewBudget.maxTotalWallTimeMs to at least ${reviewTiming.recommendedReviewWallTimeMs}.`);
+  }
+  const judgeProvider = judgeRoute.llmAvailable ? judgeRoute.provider : "deterministic_fallback";
   lines.push("", "Judge");
   lines.push(`  provider: ${judgeProvider}`);
   lines.push(judgeProvider === "deterministic_fallback" ? "  billing: none (deterministic fallback)" : "  billing: direct provider API calls (pay-per-token billing)");
@@ -188955,6 +189101,20 @@ async function runDoctor(options) {
   return lines.join(`
 `);
 }
+function calculateReviewTiming(config2, llmJudgeAvailable) {
+  const primaryPhaseMs = Math.max(0, ...Object.values(config2.agents).filter((agent) => agent.enabled).map((agent) => agent.timeoutMs));
+  const verificationPhaseMs = config2.verification.enabled ? config2.verification.timeoutMs : 0;
+  const judgePhaseMs = llmJudgeAvailable ? config2.judge.timeoutMs : 0;
+  const sequentialPhaseMs = primaryPhaseMs + verificationPhaseMs + judgePhaseMs;
+  const recommendedReviewWallTimeMs = sequentialPhaseMs + Math.max(60000, Math.ceil(sequentialPhaseMs * 0.1));
+  return {
+    primaryPhaseMs,
+    verificationPhaseMs,
+    judgePhaseMs,
+    sequentialPhaseMs,
+    recommendedReviewWallTimeMs
+  };
+}
 async function loadDoctorConfig(options) {
   try {
     return { loaded: await loadConfig(options) };
@@ -191755,14 +191915,14 @@ var zGuardCreateElicitationResponseCancel = object({
 });
 // node_modules/@agentclientprotocol/sdk/dist/jsonrpc.js
 var CANCEL_REQUEST_METHOD = "$/cancel_request";
-function isRecord9(value) {
+function isRecord10(value) {
   return typeof value === "object" && value !== null;
 }
 function isJsonRpcId(value) {
   return value === null || typeof value === "string" || typeof value === "number" && Number.isFinite(value);
 }
 function cancelRequestId(params) {
-  if (!isRecord9(params) || !isJsonRpcId(params["requestId"])) {
+  if (!isRecord10(params) || !isJsonRpcId(params["requestId"])) {
     return;
   }
   return params["requestId"];
@@ -192109,7 +192269,7 @@ class Connection {
     if (this.abortController.signal.aborted) {
       return;
     }
-    if (!isRecord9(message)) {
+    if (!isRecord10(message)) {
       console.error("Invalid message", { message });
       return;
     }
@@ -192202,7 +192362,7 @@ class Connection {
       pendingResponse.cleanup?.();
       if ("result" in response) {
         pendingResponse.resolve(response.result);
-      } else if ("error" in response && isRecord9(response.error)) {
+      } else if ("error" in response && isRecord10(response.error)) {
         const { code, message, data } = response.error;
         pendingResponse.reject(new RequestError(code, message, data));
       } else {
@@ -192412,7 +192572,7 @@ function ndJsonStream(output2, input2) {
         if (trimmedLine) {
           try {
             const message = JSON.parse(trimmedLine);
-            if (isRecord9(message)) {
+            if (isRecord10(message)) {
               controller.enqueue(message);
             } else {
               console.warn("Skipping JSON line that is not an object:", trimmedLine);
@@ -193301,6 +193461,45 @@ class BaseAcpAgentManager {
   }
 }
 
+// src/acp/ndJsonLineLimit.ts
+var JSON_STRING_MAX_ESCAPE_EXPANSION = 6;
+var ACP_NDJSON_ENVELOPE_BYTES = 2 * 1048576;
+var NEWLINE_BYTE = 10;
+var MAX_ACP_NDJSON_LINE_BYTES = MAX_AGENT_OUTPUT_BYTES * JSON_STRING_MAX_ESCAPE_EXPANSION + ACP_NDJSON_ENVELOPE_BYTES;
+
+class AcpNdJsonLineLimitError extends Error {
+  maxLineBytes;
+  constructor(maxLineBytes) {
+    super(`ACP NDJSON line exceeded ${maxLineBytes} bytes.`);
+    this.maxLineBytes = maxLineBytes;
+    this.name = "AcpNdJsonLineLimitError";
+  }
+}
+function limitAcpNdJsonLineBytes(input2, maxLineBytes = MAX_ACP_NDJSON_LINE_BYTES) {
+  if (!Number.isSafeInteger(maxLineBytes) || maxLineBytes <= 0) {
+    throw new RangeError("ACP NDJSON line limit must be a positive integer.");
+  }
+  let pendingLineBytes = 0;
+  return input2.pipeThrough(new TransformStream({
+    transform(chunk, controller) {
+      let start = 0;
+      for (;; ) {
+        const newlineIndex = chunk.indexOf(NEWLINE_BYTE, start);
+        const end = newlineIndex === -1 ? chunk.byteLength : newlineIndex;
+        pendingLineBytes += end - start;
+        if (pendingLineBytes > maxLineBytes) {
+          throw new AcpNdJsonLineLimitError(maxLineBytes);
+        }
+        if (newlineIndex === -1)
+          break;
+        pendingLineBytes = 0;
+        start = newlineIndex + 1;
+      }
+      controller.enqueue(chunk);
+    }
+  }));
+}
+
 // src/core/findingAdmission.ts
 import { createHash as createHash4 } from "node:crypto";
 var SAFETY_CATEGORIES = new Set([
@@ -193642,6 +193841,43 @@ var evidenceQualities = [
 ];
 var MAX_EVIDENCE_REFS2 = 20;
 var MAX_EVIDENCE_LINE2 = 1e6;
+var STRICT_ROOT_KEYS = new Set([
+  "summary",
+  "findings",
+  "testsToAdd",
+  "residualRisks",
+  "openQuestions",
+  "cisaSecureByDesign"
+]);
+var STRICT_FINDING_KEYS = new Set([
+  "severity",
+  "category",
+  "title",
+  "evidence",
+  "recommendation",
+  "disposition",
+  "changeRelation",
+  "evidenceQuality",
+  "evidenceRefs",
+  "files",
+  "confidence",
+  "cisaMapping"
+]);
+var STRICT_FILE_KEYS = new Set(["path", "lineStart", "lineEnd"]);
+var STRICT_EVIDENCE_REF_KEYS = new Set([
+  "kind",
+  "path",
+  "lineStart",
+  "lineEnd",
+  "label"
+]);
+var STRICT_CISA_KEYS = new Set([
+  "customerSecurityOutcomes",
+  "secureByDefault",
+  "transparencyAndAccountability",
+  "governance",
+  "notes"
+]);
 function normalizeAgentOutput(agent, role, rawText) {
   const json2 = extractFirstJsonObject2(rawText);
   if (!json2)
@@ -193675,6 +193911,19 @@ function normalizeAgentOutput(agent, role, rawText) {
     return parseFailureOpinion(agent, role, `Structured parse failed: ${error51 instanceof Error ? error51.message : String(error51)}`);
   }
 }
+function parseAgentOutputStrict(agent, role, rawText) {
+  const json2 = extractFirstJsonObject2(rawText);
+  if (!json2)
+    return;
+  try {
+    const parsed = JSON.parse(json2);
+    if (!isStrictAgentOpinion(parsed))
+      return;
+    return normalizeAgentOutput(agent, role, json2);
+  } catch {
+    return;
+  }
+}
 function extractFirstJsonObject2(text) {
   const start = text.indexOf("{");
   if (start === -1)
@@ -193732,7 +193981,7 @@ function isSeverity(value) {
   return typeof value === "string" && severities.includes(value);
 }
 function normalizeCisaSecureByDesign(value) {
-  if (!isRecord10(value))
+  if (!isRecord11(value))
     return;
   const normalized = {};
   const customerSecurityOutcomes = normalizeGateStatus(value.customerSecurityOutcomes);
@@ -193772,6 +194021,78 @@ function isChangeRelation(value) {
 function isEvidenceQuality(value) {
   return typeof value === "string" && evidenceQualities.includes(value);
 }
+function isStrictAgentOpinion(value) {
+  if (!isRecord11(value) || !hasOnlyKeys(value, STRICT_ROOT_KEYS))
+    return false;
+  if (typeof value.summary !== "string")
+    return false;
+  if (!Array.isArray(value.findings) || !value.findings.every(isStrictFinding) || !isStringArray(value.testsToAdd) || !isStringArray(value.residualRisks) || !isStringArray(value.openQuestions)) {
+    return false;
+  }
+  return value.cisaSecureByDesign === undefined || isStrictCisaSecureByDesign(value.cisaSecureByDesign);
+}
+function isStrictFinding(value) {
+  if (!isRecord11(value) || !hasOnlyKeys(value, STRICT_FINDING_KEYS)) {
+    return false;
+  }
+  if (!isSeverity(value.severity) || !isCategory(value.category) || !isNonEmptyString(value.title) || !isNonEmptyString(value.evidence) || !isNonEmptyString(value.recommendation) || !isConfidence(value.confidence)) {
+    return false;
+  }
+  if (value.disposition !== undefined && !isDisposition(value.disposition) || value.changeRelation !== undefined && !isChangeRelation(value.changeRelation) || value.evidenceQuality !== undefined && !isEvidenceQuality(value.evidenceQuality) || value.files !== undefined && !isStrictFindingFiles(value.files) || value.evidenceRefs !== undefined && !isStrictEvidenceRefs(value.evidenceRefs) || value.cisaMapping !== undefined && !isStringArray(value.cisaMapping)) {
+    return false;
+  }
+  return true;
+}
+function isStrictFindingFiles(value) {
+  return Array.isArray(value) && value.every((item) => isRecord11(item) && hasOnlyKeys(item, STRICT_FILE_KEYS) && isNonEmptyString(item.path) && isOptionalLineNumber(item.lineStart) && isOptionalLineNumber(item.lineEnd));
+}
+function isStrictEvidenceRefs(value) {
+  return Array.isArray(value) && value.length <= MAX_EVIDENCE_REFS2 && value.every((item) => {
+    if (!isRecord11(item) || !hasOnlyKeys(item, STRICT_EVIDENCE_REF_KEYS)) {
+      return false;
+    }
+    if (item.kind !== "file" && item.kind !== "diff_hunk" && item.kind !== "plan_clause") {
+      return false;
+    }
+    if (!isOptionalNonEmptyString(item.path) || !isOptionalNonEmptyString(item.label) || !isOptionalLineNumber(item.lineStart) || !isOptionalLineNumber(item.lineEnd)) {
+      return false;
+    }
+    if (item.kind === "file" || item.kind === "diff_hunk") {
+      return item.path !== undefined && item.lineStart !== undefined;
+    }
+    return item.label !== undefined || item.lineStart !== undefined;
+  });
+}
+function isStrictCisaSecureByDesign(value) {
+  if (!isRecord11(value) || !hasOnlyKeys(value, STRICT_CISA_KEYS))
+    return false;
+  for (const key of [
+    "customerSecurityOutcomes",
+    "secureByDefault",
+    "transparencyAndAccountability",
+    "governance"
+  ]) {
+    if (value[key] !== undefined && !normalizeGateStatus(value[key])) {
+      return false;
+    }
+  }
+  return value.notes === undefined || isStringArray(value.notes);
+}
+function hasOnlyKeys(value, allowed) {
+  return Object.keys(value).every((key) => allowed.has(key));
+}
+function isStringArray(value) {
+  return Array.isArray(value) && value.every((item) => typeof item === "string");
+}
+function isNonEmptyString(value) {
+  return typeof value === "string" && value.trim().length > 0;
+}
+function isOptionalNonEmptyString(value) {
+  return value === undefined || isNonEmptyString(value);
+}
+function isOptionalLineNumber(value) {
+  return value === undefined || normalizeLineNumber(value) !== undefined;
+}
 function normalizeStringList(value) {
   return Array.isArray(value) ? value.filter((item) => typeof item === "string").map((item) => sanitizeText(item)) : [];
 }
@@ -193782,7 +194103,7 @@ function normalizeFindingFiles(value) {
   if (!Array.isArray(value))
     return;
   const files = value.flatMap((item) => {
-    if (!isRecord10(item) || typeof item.path !== "string" || item.path.trim().length === 0) {
+    if (!isRecord11(item) || typeof item.path !== "string" || item.path.trim().length === 0) {
       return [];
     }
     const file2 = {
@@ -193802,7 +194123,7 @@ function normalizeEvidenceRefs2(value) {
   if (!Array.isArray(value))
     return;
   const references = value.slice(0, MAX_EVIDENCE_REFS2).flatMap((item) => {
-    if (!isRecord10(item) || item.kind !== "file" && item.kind !== "diff_hunk" && item.kind !== "plan_clause") {
+    if (!isRecord11(item) || item.kind !== "file" && item.kind !== "diff_hunk" && item.kind !== "plan_clause") {
       return [];
     }
     const reference = { kind: item.kind };
@@ -193825,7 +194146,7 @@ function normalizeEvidenceRefs2(value) {
 function normalizeLineNumber(value) {
   return typeof value === "number" && Number.isSafeInteger(value) && value > 0 && value <= MAX_EVIDENCE_LINE2 ? value : undefined;
 }
-function isRecord10(value) {
+function isRecord11(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 
@@ -193851,9 +194172,9 @@ class SubprocessAcpAgentManager extends BaseAcpAgentManager {
       };
     }
     const provider = input2.agent === "codex" ? this.config.agents.codex.provider : undefined;
-    let env;
+    let launchContext;
     try {
-      env = buildChildEnv(this.parentEnv, agentConfig.auth.envWhitelist, agentConfig.env, {
+      launchContext = buildChildLaunchContext(this.parentEnv, agentConfig.auth.envWhitelist, agentConfig.env, {
         agent: input2.agent,
         model: agentConfig.model,
         provider,
@@ -193870,7 +194191,7 @@ class SubprocessAcpAgentManager extends BaseAcpAgentManager {
       };
     }
     try {
-      return await runSubprocessAgent(input2.agent, agentConfig, input2, env);
+      return await runSubprocessAgent(input2.agent, agentConfig, input2, launchContext.env, launchContext.executionIdentity);
     } catch (error51) {
       return {
         agent: input2.agent,
@@ -193883,7 +194204,7 @@ class SubprocessAcpAgentManager extends BaseAcpAgentManager {
     }
   }
 }
-async function runSubprocessAgent(agent, agentConfig, input2, env) {
+async function runSubprocessAgent(agent, agentConfig, input2, env, launchExecutionIdentity) {
   const startedAt = new Date().toISOString();
   const effectiveTimeoutMs = resolveEffectiveTimeoutMs(input2);
   if (effectiveTimeoutMs <= 0) {
@@ -193908,11 +194229,15 @@ async function runSubprocessAgent(agent, agentConfig, input2, env) {
     let stdout = "";
     let stderr3 = "";
     let settled = false;
+    let spawned = false;
     let startedWrite;
     child.once("spawn", () => {
       if (settled)
         return;
-      startedWrite = Promise.resolve().then(() => input2.onStarted?.()).catch(() => {
+      spawned = true;
+      startedWrite = Promise.resolve().then(async () => {
+        await input2.onStarted?.(launchExecutionIdentity);
+      }).catch(() => {
         return;
       });
     });
@@ -193922,7 +194247,8 @@ async function runSubprocessAgent(agent, agentConfig, input2, env) {
         return;
       settled = true;
       clearTimeout(timeout);
-      (startedWrite ?? Promise.resolve()).then(() => resolveResult(result));
+      const finalResult = spawned && result.executionIdentity === undefined ? { ...result, executionIdentity: launchExecutionIdentity } : result;
+      (startedWrite ?? Promise.resolve()).then(() => resolveResult(finalResult));
     };
     const timeout = setTimeout(() => {
       abortController.abort(new Error("Kyoso agent timeout"));
@@ -193955,7 +194281,17 @@ async function runSubprocessAgent(agent, agentConfig, input2, env) {
         error: failure
       });
     });
-    runAcpClientWorkflow(child, input2, abortController, resolveEffortConfigOption(agent, agentConfig.effort)).then(({ rawText, warnings, usage, outputBytes, stopReason }) => {
+    runAcpClientWorkflow(child, input2, abortController, resolveEffortConfigOption(agent, agentConfig.effort), launchExecutionIdentity).then(({
+      rawText,
+      warnings,
+      usage,
+      messageBytes,
+      thoughtBytes,
+      outputBytes,
+      outputWarningTriggered,
+      stopReason,
+      executionIdentity
+    }) => {
       stdout = rawText;
       const completed = stopReason === "end_turn";
       resolveOnce({
@@ -193966,8 +194302,12 @@ async function runSubprocessAgent(agent, agentConfig, input2, env) {
         normalized: normalizeAgentOutput(agent, input2.role, rawText),
         startedAt,
         completedAt: new Date().toISOString(),
+        messageBytes,
+        thoughtBytes,
         outputBytes,
+        outputWarningTriggered,
         stopReason,
+        executionIdentity,
         ...usage ? { usage } : {},
         ...warnings.length > 0 ? { warnings } : {},
         ...completed ? {} : {
@@ -193981,18 +194321,40 @@ async function runSubprocessAgent(agent, agentConfig, input2, env) {
       const outputLimitError = findOutputLimitError(error51, abortController);
       if (outputLimitError) {
         stdout = outputLimitError.rawText;
+        const normalized = parseAgentOutputStrict(agent, input2.role, stdout);
         resolveOnce({
           agent,
           role: input2.role,
           status: "failed",
           rawText: stdout,
+          ...normalized ? { normalized, salvaged: true } : {},
+          messageBytes: outputLimitError.messageBytes,
+          thoughtBytes: outputLimitError.thoughtBytes,
           outputBytes: outputLimitError.outputBytes,
+          outputWarningTriggered: outputLimitError.outputWarningTriggered,
           stopReason: "cancelled",
           startedAt,
           completedAt: new Date().toISOString(),
           error: {
             code: "AGENT_OUTPUT_LIMIT",
-            message: `Agent output exceeded ${outputLimitError.maxOutputBytes} bytes and was cancelled.`
+            message: `Agent output exceeded the ${outputLimitError.maxOutputBytes}-byte hard limit (message: ${outputLimitError.messageBytes}, thought: ${outputLimitError.thoughtBytes}, total: ${outputLimitError.outputBytes}) and was cancelled. Adjust user-global reviewBudget.maxAgentOutputBytes to change this ceiling.`
+          }
+        });
+        return;
+      }
+      if (error51 instanceof AcpNdJsonLineLimitError) {
+        abortController.abort(error51);
+        resolveOnce({
+          agent,
+          role: input2.role,
+          status: "failed",
+          rawText: stdout,
+          stopReason: "cancelled",
+          startedAt,
+          completedAt: new Date().toISOString(),
+          error: {
+            code: "AGENT_PROTOCOL_LIMIT",
+            message: `Agent emitted an ACP NDJSON line above the ${error51.maxLineBytes}-byte transport limit and was cancelled.`
           }
         });
         return;
@@ -194029,13 +194391,13 @@ async function runSubprocessAgent(agent, agentConfig, input2, env) {
     });
   });
 }
-async function runAcpClientWorkflow(child, input2, abortController, configOption) {
+async function runAcpClientWorkflow(child, input2, abortController, configOption, launchExecutionIdentity) {
   if (!child.stdin || !child.stdout) {
     throw new Error("Agent process did not expose stdio streams.");
   }
   const output2 = Writable.toWeb(child.stdin);
   const inputStream = Readable.toWeb(child.stdout);
-  const stream2 = ndJsonStream(output2, inputStream);
+  const stream2 = ndJsonStream(output2, limitAcpNdJsonLineBytes(inputStream));
   const app = client({ name: "kyoso" }).onRequest(methods.client.session.requestPermission, () => ({
     outcome: { outcome: "cancelled" }
   })).onRequest(methods.client.fs.readTextFile, async (ctx) => ({
@@ -194096,7 +194458,10 @@ async function runAcpClientWorkflow(child, input2, abortController, configOption
         return;
       });
       let rawText = "";
+      let messageBytes = 0;
+      let thoughtBytes = 0;
       let outputBytes = 0;
+      let outputWarningTriggered = false;
       for (;; ) {
         const message = await session.nextUpdate();
         if (message.kind === "stop") {
@@ -194105,8 +194470,12 @@ async function runAcpClientWorkflow(child, input2, abortController, configOption
             rawText,
             warnings,
             ...usage ? { usage } : {},
+            messageBytes,
+            thoughtBytes,
             outputBytes,
-            stopReason: message.stopReason
+            outputWarningTriggered,
+            stopReason: message.stopReason,
+            executionIdentity: withReportedExecutionIdentity(launchExecutionIdentity, message.response._meta)
           };
         }
         const update = message.update;
@@ -194114,35 +194483,60 @@ async function runAcpClientWorkflow(child, input2, abortController, configOption
           continue;
         }
         const chunkBytes = Buffer.byteLength(update.content.text, "utf8");
-        const nextOutputBytes = outputBytes + chunkBytes;
+        const isMessage = update.sessionUpdate === "agent_message_chunk";
+        const nextMessageBytes = messageBytes + (isMessage ? chunkBytes : 0);
+        const nextThoughtBytes = thoughtBytes + (isMessage ? 0 : chunkBytes);
+        const nextOutputBytes = nextMessageBytes + nextThoughtBytes;
+        const nextOutputWarningTriggered = outputWarningTriggered || input2.warnOutputBytes !== undefined && nextOutputBytes >= input2.warnOutputBytes;
         if (input2.maxOutputBytes !== undefined && nextOutputBytes > input2.maxOutputBytes) {
+          const retainedRawText = isMessage ? `${rawText}${utf8Prefix(update.content.text, input2.maxOutputBytes - outputBytes)}` : rawText;
           await ctx.notify(methods.agent.session.cancel, {
             sessionId: session.sessionId
           }).catch(() => {
             return;
           });
-          const error51 = new AgentOutputLimitError(rawText, nextOutputBytes, input2.maxOutputBytes);
+          const error51 = new AgentOutputLimitError(retainedRawText, nextMessageBytes, nextThoughtBytes, nextOutputBytes, input2.maxOutputBytes, nextOutputWarningTriggered);
           abortController.abort(error51);
           throw error51;
         }
-        if (update.sessionUpdate === "agent_message_chunk") {
+        if (isMessage) {
           rawText += update.content.text;
         }
+        messageBytes = nextMessageBytes;
+        thoughtBytes = nextThoughtBytes;
         outputBytes = nextOutputBytes;
+        outputWarningTriggered = nextOutputWarningTriggered;
       }
     });
   });
 }
+function utf8Prefix(input2, maxBytes) {
+  const encoded = new TextEncoder().encode(input2);
+  const budget = Math.max(0, Math.min(maxBytes, encoded.byteLength));
+  const decoder = new TextDecoder("utf-8", { fatal: true });
+  for (let end = budget;end > 0; end -= 1) {
+    try {
+      return decoder.decode(encoded.subarray(0, end));
+    } catch {}
+  }
+  return "";
+}
 
 class AgentOutputLimitError extends Error {
   rawText;
+  messageBytes;
+  thoughtBytes;
   outputBytes;
   maxOutputBytes;
-  constructor(rawText, outputBytes, maxOutputBytes) {
+  outputWarningTriggered;
+  constructor(rawText, messageBytes, thoughtBytes, outputBytes, maxOutputBytes, outputWarningTriggered) {
     super(`Agent output exceeded ${maxOutputBytes} bytes.`);
     this.rawText = rawText;
+    this.messageBytes = messageBytes;
+    this.thoughtBytes = thoughtBytes;
     this.outputBytes = outputBytes;
     this.maxOutputBytes = maxOutputBytes;
+    this.outputWarningTriggered = outputWarningTriggered;
     this.name = "AgentOutputLimitError";
   }
 }
@@ -194159,6 +194553,18 @@ function resolveEffectiveTimeoutMs(input2) {
 function normalizeUsage3(usage) {
   return normalizeModelTokenUsage(usage);
 }
+function withReportedExecutionIdentity(identity, metadata) {
+  const record2 = isRecord12(metadata) ? metadata : {};
+  return createModelExecutionIdentity({
+    providerRoute: identity.providerRoute,
+    requestedModel: identity.requestedModel,
+    reportedProvider: record2.provider,
+    reportedModel: record2.model
+  });
+}
+function isRecord12(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value);
+}
 function resolveEffortConfigOption(agent, effort) {
   if (!effort)
     return;
@@ -208028,7 +208434,7 @@ function clearInheritedOpenRouterModelForProviderReset(baseConfig, overridden, o
     return;
   }
   const codex = readPath2(overridden, ["agents", "codex"]);
-  if (isRecord11(codex))
+  if (isRecord13(codex))
     delete codex.model;
 }
 function findAssignmentForPath(overrides, path) {
@@ -208073,7 +208479,7 @@ function parseConfigOverrideValue(value, currentValue) {
 function readPath2(target, path) {
   let current = target;
   for (const key of path) {
-    if (!isRecord11(current))
+    if (!isRecord13(current))
       return;
     current = current[key];
   }
@@ -208083,7 +208489,7 @@ function writePath2(target, path, value) {
   let current = target;
   for (const key of path.slice(0, -1)) {
     const child = current[key];
-    if (!isRecord11(child)) {
+    if (!isRecord13(child)) {
       throw new Error(`Cannot apply --set key ${JSON.stringify(path.join("."))}.`);
     }
     current = child;
@@ -208092,7 +208498,7 @@ function writePath2(target, path, value) {
   if (leaf)
     current[leaf] = value;
 }
-function isRecord11(value) {
+function isRecord13(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 
@@ -208261,6 +208667,9 @@ function buildAgentPrompt(tool, request, agent, role, policy = {}) {
     "A formal finding requires a concrete file/line, diff hunk, or plan clause; an actual failure or exploit path; a change relation; and an executable recommendation.",
     "Put insufficiently supported hypotheses in openQuestions instead of findings.",
     "Do not create formal findings for style, formatting, generic hardening, unrelated pre-existing issues, duplicate tests, implementation-detail tests, or exhaustive boundary matrices.",
+    ...policy.maxFindingsTarget === undefined ? [] : [
+      `Avoid duplicates and aim for at most ${policy.maxFindingsTarget} findings in severity order, but do not hide a material finding solely to meet this target.`
+    ],
     "Recommend only specific regression scenarios tied to changed behavior, with at most three testsToAdd entries.",
     "Critical and High safety issues must still be reported when they match a non-goal.",
     "Write each finding title in concise English, regardless of the language used elsewhere. Titles are compared across agents for deduplication.",
@@ -208885,6 +209294,12 @@ function sanitizeForAudit(value, options = {}) {
   if (typeof value === "object" && value !== null) {
     const result = {};
     for (const [key, nested] of Object.entries(value)) {
+      if (key === "executionIdentity") {
+        const identity = normalizeModelExecutionIdentity(nested);
+        if (identity)
+          result[key] = identity;
+        continue;
+      }
       if (/raw|content|env|credential|token|secret|password/i.test(key) && !(options.includeRawAgentOutput && key === "rawText") && !isUsageMetadata(key, nested)) {
         continue;
       }
@@ -209165,7 +209580,7 @@ function validateReviewContract(request) {
   const contract = request.reviewContract;
   if (contract === undefined)
     return;
-  if (!isRecord12(contract)) {
+  if (!isRecord14(contract)) {
     throw new KyosoRequestError("reviewContract must be an object", "VALIDATION_ERROR");
   }
   const allowedKeys = new Set(["focus", "nonGoals", "acceptedRisks"]);
@@ -209182,7 +209597,7 @@ function validateReviewContract(request) {
     throw new KyosoRequestError("reviewContract.nonGoals must contain at most 20 non-empty strings of 500 characters or fewer", "VALIDATION_ERROR");
   }
   const acceptedRisks = contract.acceptedRisks;
-  if (acceptedRisks !== undefined && (!Array.isArray(acceptedRisks) || acceptedRisks.length > 20 || acceptedRisks.some((risk) => !isRecord12(risk) || typeof risk.findingFingerprint !== "string" || !/^sha256:[0-9a-f]{64}$/.test(risk.findingFingerprint) || typeof risk.rationale !== "string" || risk.rationale.trim().length === 0 || risk.rationale.length > 500))) {
+  if (acceptedRisks !== undefined && (!Array.isArray(acceptedRisks) || acceptedRisks.length > 20 || acceptedRisks.some((risk) => !isRecord14(risk) || typeof risk.findingFingerprint !== "string" || !/^sha256:[0-9a-f]{64}$/.test(risk.findingFingerprint) || typeof risk.rationale !== "string" || risk.rationale.trim().length === 0 || risk.rationale.length > 500))) {
     throw new KyosoRequestError("reviewContract.acceptedRisks must contain valid finding fingerprints and bounded rationales", "VALIDATION_ERROR");
   }
 }
@@ -209194,13 +209609,13 @@ function validateSelectedFiles(request) {
     throw new KyosoRequestError("selectedFiles must be an array", "VALIDATION_ERROR");
   }
   for (const file2 of selectedFiles) {
-    if (!isRecord12(file2) || typeof file2.path !== "string" || file2.path.trim().length === 0 || typeof file2.content !== "string" || file2.language !== undefined && typeof file2.language !== "string" || file2.truncated !== undefined && typeof file2.truncated !== "boolean") {
+    if (!isRecord14(file2) || typeof file2.path !== "string" || file2.path.trim().length === 0 || typeof file2.content !== "string" || file2.language !== undefined && typeof file2.language !== "string" || file2.truncated !== undefined && typeof file2.truncated !== "boolean") {
       throw new KyosoRequestError("selectedFiles entries require string path/content and valid optional metadata", "VALIDATION_ERROR");
     }
     normalizeRelativePath(file2.path);
   }
 }
-function isRecord12(value) {
+function isRecord14(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 
@@ -209213,7 +209628,7 @@ function renderMarkdownResult(tool, result, options = {}) {
     `**Mode:** ${tool}`,
     `**Completion:** ${formatCompletion(result)}`,
     `**Request fingerprint:** ${shortFingerprint(result.requestFingerprint)}`,
-    `**Agents:** ${result.agentOpinions.map((opinion) => `${title(opinion.agent)} ${opinion.status}`).join(", ")}`,
+    `**Agents:** ${result.agentOpinions.map((opinion) => `${title(opinion.agent)} ${opinion.status}${opinion.salvaged ? " (salvaged)" : ""}`).join(", ")}`,
     `**Review mode:** ${formatReviewMode(result)}`,
     ...result.verificationMode ? [
       `**Verification mode:** ${formatVerificationMode(result.verificationMode)}`
@@ -209264,7 +209679,7 @@ function renderMarkdownResult(tool, result, options = {}) {
   }
   lines.push("", "## Agent Opinions", "");
   for (const opinion of result.agentOpinions) {
-    lines.push(`### ${title(opinion.agent)}`, "", `${opinion.summary} (${opinion.status})`, "");
+    lines.push(`### ${title(opinion.agent)}`, "", `${opinion.summary} (${opinion.status}${opinion.salvaged ? ", salvaged" : ""})`, "");
   }
   lines.push("", "## Disagreements", "");
   if (result.reviewMode === "single_agent") {
@@ -209295,17 +209710,50 @@ function defaultSummaryText(result) {
 function formatExecutionBudget(result) {
   const budget = result.executionBudget;
   const agentOutputs = Object.entries(budget.agentOutputBytes);
-  const outputLines = agentOutputs.length > 0 ? agentOutputs.map(([agent, bytes]) => `- ${title(agent)}: ${bytes} bytes`) : ["- None reported."];
+  const byteBreakdowns = new Map;
+  for (const call of result.audit.modelCalls) {
+    if (call.status !== "completed" || !call.agent)
+      continue;
+    const current = byteBreakdowns.get(call.agent) ?? {
+      messageBytes: 0,
+      thoughtBytes: 0
+    };
+    current.messageBytes += call.messageBytes ?? 0;
+    current.thoughtBytes += call.thoughtBytes ?? 0;
+    byteBreakdowns.set(call.agent, current);
+  }
+  const outputLines = agentOutputs.length > 0 ? agentOutputs.map(([agent, bytes]) => {
+    const breakdown = byteBreakdowns.get(agent);
+    return `- ${title(agent)}: ${bytes} bytes${breakdown ? ` (message: ${breakdown.messageBytes}, thought: ${breakdown.thoughtBytes})` : ""}`;
+  }) : ["- None reported."];
+  const identityLines = result.audit.modelCalls.filter((call) => call.status === "completed").map((call) => {
+    const label = [call.kind, call.agent].filter(Boolean).join("/");
+    const identity = call.executionIdentity;
+    if (!identity)
+      return `- ${label}: identity=unknown`;
+    const reportedIdentity = [
+      identity.reportedProvider ? `reportedProvider=${escapeMarkdownText(identity.reportedProvider)}` : undefined,
+      identity.reportedModel ? `reportedModel=${escapeMarkdownText(identity.reportedModel)}` : undefined
+    ].filter((value) => value !== undefined);
+    return `- ${label}: route=${identity.providerRoute}, requested=${escapeMarkdownText(identity.requestedModel ?? "unknown")}${reportedIdentity.length > 0 ? `, ${reportedIdentity.join(", ")}` : ""}, reporting=${identity.reportingStatus}`;
+  });
   const totalTokens = budget.tokenUsage.totals.totalTokens;
+  const plan = budget.modelCallPlan;
+  const outputLimits = budget.effectiveWarnAgentOutputBytes === undefined ? `${budget.maxAgentOutputBytes} bytes hard (soft warning disabled)` : `${budget.effectiveWarnAgentOutputBytes} bytes soft / ${budget.maxAgentOutputBytes} bytes hard`;
   return [
     "",
     "## Execution Budget",
     "",
-    `- Model calls: ${budget.modelCalls.planned} planned / ${budget.modelCalls.consumed} consumed / ${budget.modelCalls.skipped} skipped`,
+    `- Model calls: ${budget.modelCalls.planned} planned / ${budget.modelCalls.consumed} consumed / ${budget.modelCalls.skipped} skipped / ${budget.maxModelCalls} ceiling`,
+    `- Potential calls: ${plan.potentialTotalCalls} total (${plan.requiredPrimaryCalls} primary, ${plan.potentialVerifierCalls} verifier, ${plan.potentialJudgeCalls} judge)`,
     `- Wall time: ${budget.wallTime.consumedMs}ms consumed / ${budget.wallTime.limitMs}ms limit`,
     `- Token usage: ${budget.tokenUsage.status} (${budget.tokenUsage.reportedCalls} reported, ${budget.tokenUsage.unknownCalls} unknown${totalTokens === undefined ? "" : `, ${totalTokens} total`})`,
+    `- Agent output limits: ${outputLimits}`,
+    `- Findings target: ${budget.maxFindingsPerAgent} per primary agent (soft)`,
     "- Agent output:",
-    ...outputLines
+    ...outputLines,
+    "- Model identities:",
+    ...identityLines.length > 0 ? identityLines : ["- None completed."]
   ];
 }
 function formatCompletion(result) {
@@ -209698,11 +210146,11 @@ function canonicalJson(value) {
 function canonicalize(value) {
   if (Array.isArray(value))
     return value.map(canonicalize);
-  if (!isRecord13(value))
+  if (!isRecord15(value))
     return value;
   return Object.fromEntries(Object.entries(value).filter(([, child]) => child !== undefined).sort(([left], [right]) => left < right ? -1 : left > right ? 1 : 0).map(([key, child]) => [key, canonicalize(child)]));
 }
-function isRecord13(value) {
+function isRecord15(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 
@@ -209716,12 +210164,10 @@ var REVIEW_BUDGET_KEYS = new Set([
 ]);
 var MODEL_CALL_KINDS = ["primary", "verifier", "judge"];
 function resolveReviewBudget(ceiling, requested) {
-  if (requested === undefined)
-    return ceiling;
-  if (!isRecord14(requested)) {
+  if (requested !== undefined && !isRecord16(requested)) {
     throw new KyosoRequestError("options.reviewBudget must be an object.", "REVIEW_BUDGET_INVALID");
   }
-  for (const [key, value] of Object.entries(requested)) {
+  for (const [key, value] of Object.entries(requested ?? {})) {
     if (!REVIEW_BUDGET_KEYS.has(key)) {
       throw new KyosoRequestError(`options.reviewBudget.${key} is not supported.`, "REVIEW_BUDGET_INVALID");
     }
@@ -209742,36 +210188,105 @@ function resolveReviewBudget(ceiling, requested) {
     "maxFindingsPerAgent"
   ];
   for (const key of numericKeys) {
-    const value = requested[key];
+    const value = requested?.[key];
     if (value === undefined)
       continue;
     if (value > ceiling[key]) {
       throw new KyosoRequestError(`options.reviewBudget.${key} cannot exceed the user-global ceiling.`, "REVIEW_BUDGET_EXCEEDS_CEILING");
     }
   }
-  if (ceiling.skipOptionalPhasesWhenTokenUsageUnknown && requested.skipOptionalPhasesWhenTokenUsageUnknown === false) {
+  if (ceiling.skipOptionalPhasesWhenTokenUsageUnknown && requested?.skipOptionalPhasesWhenTokenUsageUnknown === false) {
     throw new KyosoRequestError("options.reviewBudget.skipOptionalPhasesWhenTokenUsageUnknown cannot relax the user-global ceiling.", "REVIEW_BUDGET_EXCEEDS_CEILING");
   }
+  const maxAgentOutputBytes = requested?.maxAgentOutputBytes ?? ceiling.maxAgentOutputBytes;
+  return {
+    maxModelCalls: requested?.maxModelCalls ?? ceiling.maxModelCalls,
+    maxTotalWallTimeMs: requested?.maxTotalWallTimeMs ?? ceiling.maxTotalWallTimeMs,
+    warnAgentOutputBytes: ceiling.warnAgentOutputBytes,
+    maxAgentOutputBytes,
+    maxFindingsPerAgent: requested?.maxFindingsPerAgent ?? ceiling.maxFindingsPerAgent,
+    skipOptionalPhasesWhenTokenUsageUnknown: ceiling.skipOptionalPhasesWhenTokenUsageUnknown || requested?.skipOptionalPhasesWhenTokenUsageUnknown === true,
+    ...ceiling.warnAgentOutputBytes < maxAgentOutputBytes ? { effectiveWarnAgentOutputBytes: ceiling.warnAgentOutputBytes } : {}
+  };
+}
+function buildReviewModelCallPlan(input2) {
+  const requiredPrimaryCalls = nonNegativeInteger(input2.requiredPrimaryCalls);
+  const potentialVerifierCalls = input2.verificationEnabled && requiredPrimaryCalls === 2 ? Math.min(2, nonNegativeInteger(input2.verificationMaxFindings)) : 0;
+  const potentialJudgeCalls = input2.llmJudgeAvailable ? 1 : 0;
+  const potentialTotalCalls = requiredPrimaryCalls + potentialVerifierCalls + potentialJudgeCalls;
+  const ceilingEffects = [];
+  const availableCalls = nonNegativeInteger(input2.maxModelCalls);
+  if (availableCalls < requiredPrimaryCalls) {
+    if (requiredPrimaryCalls > 0) {
+      ceilingEffects.push({
+        kind: "primary",
+        action: "skip",
+        calls: requiredPrimaryCalls,
+        reason: "model_call_budget"
+      });
+    }
+    if (potentialVerifierCalls > 0) {
+      ceilingEffects.push({
+        kind: "verifier",
+        action: "skip",
+        calls: potentialVerifierCalls,
+        reason: "model_call_budget"
+      });
+    }
+    if (potentialJudgeCalls > 0) {
+      ceilingEffects.push({
+        kind: "judge",
+        action: "deterministic_fallback",
+        calls: potentialJudgeCalls,
+        reason: "model_call_budget"
+      });
+    }
+  } else {
+    let remainingCalls = availableCalls - requiredPrimaryCalls;
+    const verifierCalls = Math.min(potentialVerifierCalls, remainingCalls);
+    remainingCalls -= verifierCalls;
+    const skippedVerifierCalls = potentialVerifierCalls - verifierCalls;
+    if (skippedVerifierCalls > 0) {
+      ceilingEffects.push({
+        kind: "verifier",
+        action: "skip",
+        calls: skippedVerifierCalls,
+        reason: "model_call_budget"
+      });
+    }
+    const judgeCalls = Math.min(potentialJudgeCalls, remainingCalls);
+    const fallbackJudgeCalls = potentialJudgeCalls - judgeCalls;
+    if (fallbackJudgeCalls > 0) {
+      ceilingEffects.push({
+        kind: "judge",
+        action: "deterministic_fallback",
+        calls: fallbackJudgeCalls,
+        reason: "model_call_budget"
+      });
+    }
+  }
   return {
-    maxModelCalls: requested.maxModelCalls ?? ceiling.maxModelCalls,
-    maxTotalWallTimeMs: requested.maxTotalWallTimeMs ?? ceiling.maxTotalWallTimeMs,
-    maxAgentOutputBytes: requested.maxAgentOutputBytes ?? ceiling.maxAgentOutputBytes,
-    maxFindingsPerAgent: requested.maxFindingsPerAgent ?? ceiling.maxFindingsPerAgent,
-    skipOptionalPhasesWhenTokenUsageUnknown: ceiling.skipOptionalPhasesWhenTokenUsageUnknown || requested.skipOptionalPhasesWhenTokenUsageUnknown === true
+    requiredPrimaryCalls,
+    potentialVerifierCalls,
+    potentialJudgeCalls,
+    potentialTotalCalls,
+    ceilingEffects
   };
 }
 
 class ReviewBudgetTracker {
   budget;
   startedAtEpochMs;
+  modelCallPlan;
   deadlineAtEpochMs;
   reservations = new Map;
   skippedCalls = [];
   incompleteReasons = new Set;
   nextReservationId = 1;
-  constructor(budget, startedAtEpochMs = Date.now()) {
+  constructor(budget, startedAtEpochMs = Date.now(), modelCallPlan = emptyReviewModelCallPlan()) {
     this.budget = budget;
     this.startedAtEpochMs = startedAtEpochMs;
+    this.modelCallPlan = modelCallPlan;
     this.deadlineAtEpochMs = startedAtEpochMs + budget.maxTotalWallTimeMs;
   }
   remainingWallTimeMs(now = Date.now()) {
@@ -209815,24 +210330,35 @@ class ReviewBudgetTracker {
     }
     return { reservation };
   }
-  markStarted(reservation) {
+  markStarted(reservation, executionIdentity) {
     const current = this.reservations.get(reservation.id);
     if (!current || current.status !== "reserved")
       return;
     current.status = "started";
+    current.executionIdentity = normalizeModelExecutionIdentity(executionIdentity);
   }
   hasStarted(reservation) {
     const current = this.reservations.get(reservation.id);
     return current?.status === "started" || current?.status === "completed";
   }
+  executionIdentity(reservation) {
+    return this.reservations.get(reservation.id)?.executionIdentity;
+  }
   complete(reservation, values = {}) {
     const current = this.reservations.get(reservation.id);
     if (!current || current.status === "skipped" || current.status === "completed") {
       return;
     }
     current.status = "completed";
+    current.messageBytes = values.messageBytes;
+    current.thoughtBytes = values.thoughtBytes;
     current.outputBytes = values.outputBytes;
+    current.outputWarningTriggered = values.outputWarningTriggered;
+    current.salvaged = values.salvaged;
+    current.reportedFindings = values.reportedFindings;
+    current.findingsTargetExceeded = values.findingsTargetExceeded;
     current.usage = normalizeModelTokenUsage(values.usage);
+    current.executionIdentity = normalizeModelExecutionIdentity(values.executionIdentity) ?? current.executionIdentity;
     current.stopReason = values.stopReason;
   }
   skip(reservation, reason) {
@@ -209905,12 +210431,16 @@ class ReviewBudgetTracker {
       },
       executionBudget: {
         maxModelCalls: this.budget.maxModelCalls,
+        modelCallPlan: this.modelCallPlan,
         modelCalls: { planned, consumed, skipped, byKind },
         wallTime: {
           limitMs: this.budget.maxTotalWallTimeMs,
           consumedMs,
           remainingMs: this.remainingWallTimeMs(now)
         },
+        ...this.budget.effectiveWarnAgentOutputBytes !== undefined ? {
+          effectiveWarnAgentOutputBytes: this.budget.effectiveWarnAgentOutputBytes
+        } : {},
         maxAgentOutputBytes: this.budget.maxAgentOutputBytes,
         maxFindingsPerAgent: this.budget.maxFindingsPerAgent,
         skipOptionalPhasesWhenTokenUsageUnknown: this.budget.skipOptionalPhasesWhenTokenUsageUnknown,
@@ -209934,8 +210464,15 @@ class ReviewBudgetTracker {
       ...reservation.agent ? { agent: reservation.agent } : {},
       status: reservation.status === "completed" ? "completed" : "skipped",
       ...reservation.reason ? { reason: reservation.reason } : {},
+      ...reservation.messageBytes !== undefined ? { messageBytes: reservation.messageBytes } : {},
+      ...reservation.thoughtBytes !== undefined ? { thoughtBytes: reservation.thoughtBytes } : {},
       ...reservation.outputBytes !== undefined ? { outputBytes: reservation.outputBytes } : {},
+      ...reservation.outputWarningTriggered !== undefined ? { outputWarningTriggered: reservation.outputWarningTriggered } : {},
+      ...reservation.salvaged !== undefined ? { salvaged: reservation.salvaged } : {},
+      ...reservation.reportedFindings !== undefined ? { reportedFindings: reservation.reportedFindings } : {},
+      ...reservation.findingsTargetExceeded !== undefined ? { findingsTargetExceeded: reservation.findingsTargetExceeded } : {},
       ...reservation.usage ? { usage: reservation.usage } : {},
+      ...reservation.executionIdentity ? { executionIdentity: reservation.executionIdentity } : {},
       ...reservation.stopReason ? { stopReason: reservation.stopReason } : {}
     }));
     return [...reservations, ...this.skippedCalls];
@@ -209959,7 +210496,19 @@ function addUsage(total, usage) {
 function isPositiveInteger(value) {
   return typeof value === "number" && Number.isInteger(value) && value > 0;
 }
-function isRecord14(value) {
+function nonNegativeInteger(value) {
+  return Number.isFinite(value) && value > 0 ? Math.floor(value) : 0;
+}
+function emptyReviewModelCallPlan() {
+  return {
+    requiredPrimaryCalls: 0,
+    potentialVerifierCalls: 0,
+    potentialJudgeCalls: 0,
+    potentialTotalCalls: 0,
+    ceilingEffects: []
+  };
+}
+function isRecord16(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 
@@ -210021,7 +210570,7 @@ function parseVerificationVerdicts(rawText) {
     if (!Array.isArray(parsed.verdicts))
       return;
     return parsed.verdicts.flatMap((item) => {
-      if (!isRecord15(item))
+      if (!isRecord17(item))
         return [];
       if (typeof item.findingId !== "string")
         return [];
@@ -210099,7 +210648,7 @@ function verificationNote(reasoning) {
 function isVerdict(value) {
   return value === "confirmed" || value === "refuted" || value === "uncertain";
 }
-function isRecord15(value) {
+function isRecord17(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 
@@ -210124,13 +210673,14 @@ async function runReview(tool, request, options = {}) {
   } catch (error51) {
     if (error51 instanceof KyosoRequestError) {
       const config2 = kyosoConfigSchema.parse(defaultConfig);
-      const budgetTracker = new ReviewBudgetTracker(config2.reviewBudget, startedAtEpochMs);
+      const reviewBudget = resolveReviewBudget(config2.reviewBudget, undefined);
+      const budgetTracker = new ReviewBudgetTracker(reviewBudget, startedAtEpochMs, configuredReviewModelCallPlan(config2, reviewBudget, options.env ?? process.env));
       const requestFingerprint = createRequestFingerprint({
         tool,
         request: requestForRecursionFingerprint(request),
         config: config2,
         roles: resolveAgentRoles(config2),
-        budget: config2.reviewBudget,
+        budget: reviewBudget,
         entrypoint: options.entrypoint
       });
       const trace2 = traceWriterFactory({
@@ -210236,7 +210786,7 @@ async function runReview(tool, request, options = {}) {
     });
     validateReviewRequest(tool, request);
     const reviewBudget = resolveReviewBudget(loaded.config.reviewBudget, request.options?.reviewBudget);
-    const budgetTracker = new ReviewBudgetTracker(reviewBudget, startedAtEpochMs);
+    const budgetTracker = new ReviewBudgetTracker(reviewBudget, startedAtEpochMs, configuredReviewModelCallPlan(loaded.config, reviewBudget, options.env ?? process.env, request.options?.judgeProvider));
     assertTrustedWorkspaceRoot(request.workspace?.root, loaded.config.workspace.root, cwd);
     const networkMode = resolveNetworkMode(request.options?.network, loaded.config.network.defaultMode, options.mcpNetworkMode);
     if (networkMode === "unrestricted" && !loaded.config.network.allowUnrestricted) {
@@ -210357,6 +210907,7 @@ async function runReview(tool, request, options = {}) {
       budgetTracker,
       requestFingerprint
     });
+    warnings.push(...plannedBudgetWarnings(budgetTracker));
     snapshot = await createSnapshot(traceId, tool, built.request, {
       denyPatterns,
       allowPatterns,
@@ -210383,11 +210934,9 @@ async function runReview(tool, request, options = {}) {
       budgetTracker
     });
     warnings.push(...agentResults.flatMap((result) => (result.warnings ?? []).map((warning) => `Agent ${result.agent} ${warning}`)));
-    const normalized = agentResults.map((result) => normalizeAgentRunResult(result, reviewBudget.maxFindingsPerAgent));
-    const normalizedAgentResults = normalized.map((item) => item.result);
-    for (const item of normalized.filter((item2) => item2.findingsCapped)) {
-      budgetTracker.markIncomplete("coverage_incomplete");
-      warnings.push(`Agent ${item.result.agent} findings were capped at ${reviewBudget.maxFindingsPerAgent}; review coverage is incomplete.`);
+    const normalizedAgentResults = agentResults.map((result) => normalizeAgentRunResult(result, reviewBudget.maxFindingsPerAgent));
+    for (const result of normalizedAgentResults.filter((item) => item.findingsTargetExceeded)) {
+      warnings.push(`Agent ${result.agent} reported ${result.reportedFindings} findings, above the soft target of ${reviewBudget.maxFindingsPerAgent}; all findings were retained.`);
     }
     const enabledAgents = ["codex", "claude"].filter((agent) => loaded.config.agents[agent].enabled);
     const agentsUsed = normalizedAgentResults.filter((result) => result.status !== "skipped").map((result) => result.agent);
@@ -210561,6 +211110,11 @@ async function runReview(tool, request, options = {}) {
     }));
     const crossModelAnalysis = buildCrossModelAnalysis(judge, reviewMode);
     const budgetAfterJudge = budgetTracker.snapshot();
+    const finalWarnings = Array.from(new Set([
+      ...resultWithoutMarkdown.audit.warnings ?? [],
+      ...outputWarningMessages(budgetAfterJudge),
+      ...tokenUsageWarningMessages(budgetTracker, budgetAfterJudge)
+    ]));
     const finalDecision = budgetAfterJudge.completion.status === "incomplete" ? "block" : decision;
     const resultAfterJudge = {
       ...resultWithoutMarkdown,
@@ -210572,6 +211126,7 @@ async function runReview(tool, request, options = {}) {
       audit: {
         ...resultWithoutMarkdown.audit,
         completedAt: new Date().toISOString(),
+        warnings: finalWarnings,
         modelCalls: budgetAfterJudge.modelCalls
       }
     };
@@ -210580,6 +211135,7 @@ async function runReview(tool, request, options = {}) {
       traceId,
       provider: judge.provider,
       status: judge.status,
+      ...judge.executionIdentity ? { executionIdentity: judge.executionIdentity } : {},
       timestamp: new Date().toISOString()
     };
     if (judge.error)
@@ -210773,11 +211329,20 @@ async function runFindingVerification(input2) {
     workspaceDir: input2.workspaceDir,
     timeoutMs: Math.min(input2.config.verification.timeoutMs, input2.budgetTracker.remainingWallTimeMs()),
     deadlineAtEpochMs: input2.budgetTracker.deadlineAtEpochMs,
+    warnOutputBytes: input2.budgetTracker.budget.effectiveWarnAgentOutputBytes,
     maxOutputBytes: input2.budgetTracker.budget.maxAgentOutputBytes,
     networkMode: input2.networkMode,
-    onStarted: () => {
-      input2.budgetTracker.markStarted(group.reservation);
-      return Promise.resolve();
+    onStarted: (executionIdentity) => {
+      input2.budgetTracker.markStarted(group.reservation, executionIdentity);
+      const event = buildAgentStartedEvent({
+        traceId: input2.traceId,
+        agent: group.verifier,
+        role: "finding_verifier",
+        executionIdentity: input2.budgetTracker.executionIdentity(group.reservation)
+      });
+      return input2.trace.write(event).catch(() => {
+        warnings.push("AUDIT_WRITE_FAILED: agent_started event could not be recorded.");
+      });
     }
   }));
   let results;
@@ -210919,8 +211484,8 @@ function buildCrossModelAnalysis(judge, reviewMode) {
 }
 async function runBudgetedJudge(input2) {
   const configuredProvider = input2.requestedProvider ?? input2.config.provider;
-  const provider = resolveJudgeProvider(configuredProvider, input2.env);
-  if (input2.config.mode === "deterministic_only" || provider === "deterministic_fallback") {
+  const judgeRoute = resolveJudgeCallRoute(input2.config.mode, configuredProvider, input2.env);
+  if (!judgeRoute.llmAvailable) {
     return runJudge(input2);
   }
   const fallback = () => runJudge({
@@ -210979,8 +211544,10 @@ async function runBudgetedJudge(input2) {
   const judge = await runJudge({ ...input2, timeoutMs });
   const usage = normalizeModelTokenUsage(judge.usage);
   input2.budgetTracker.complete(reservation, {
-    ...usage ? { usage } : {}
+    ...usage ? { usage } : {},
+    ...judge.executionIdentity ? { executionIdentity: judge.executionIdentity } : {}
   });
+  const executionIdentity = input2.budgetTracker.executionIdentity(reservation);
   await input2.trace.write({
     type: "model_call_completed",
     traceId: input2.traceId,
@@ -210988,6 +211555,7 @@ async function runBudgetedJudge(input2) {
     provider: judge.provider,
     resultStatus: judge.status,
     ...usage ? { usage } : {},
+    ...executionIdentity ? { executionIdentity } : {},
     timestamp: new Date().toISOString()
   });
   return judge;
@@ -211101,30 +211669,25 @@ async function runAgents(input2) {
       tool: input2.tool,
       prompt: buildAgentPrompt(input2.tool, input2.request, agent, role, {
         requiredLenses,
-        cisaEnabled: input2.config.securityReview.cisaSecureByDesign.enabled
+        cisaEnabled: input2.config.securityReview.cisaSecureByDesign.enabled,
+        maxFindingsTarget: input2.budgetTracker.budget.maxFindingsPerAgent
       }),
       workspaceDir: input2.workspaceDir,
       timeoutMs: Math.min(input2.request.options?.maxAgentTimeoutMs ?? Number.POSITIVE_INFINITY, agentConfig.timeoutMs ?? DEFAULT_AGENT_TIMEOUT_MS, input2.budgetTracker.remainingWallTimeMs()),
       deadlineAtEpochMs: input2.budgetTracker.deadlineAtEpochMs,
+      warnOutputBytes: input2.budgetTracker.budget.effectiveWarnAgentOutputBytes,
       maxOutputBytes: input2.budgetTracker.budget.maxAgentOutputBytes,
       networkMode: input2.networkMode,
-      onStarted: () => {
-        input2.budgetTracker.markStarted(reservation);
+      onStarted: (executionIdentity) => {
+        input2.budgetTracker.markStarted(reservation, executionIdentity);
         if (!acceptingStartedEvents)
           return Promise.resolve();
-        const event = {
-          type: "agent_started",
+        const event = buildAgentStartedEvent({
           traceId: input2.traceId,
           agent,
           role,
-          timestamp: new Date().toISOString()
-        };
-        if (agentConfig.model) {
-          event.model = sanitizeTextForDisplay(agentConfig.model);
-        }
-        if (agent === "codex" && input2.config.agents.codex.provider === CODEX_OPENROUTER_PROVIDER) {
-          event.provider = CODEX_OPENROUTER_PROVIDER;
-        }
+          executionIdentity: input2.budgetTracker.executionIdentity(reservation)
+        });
         const write = (async () => {
           try {
             await input2.trace.write(event);
@@ -211176,7 +211739,8 @@ async function runAgents(input2) {
       }
     };
   });
-  for (const result of orderedResults) {
+  const normalizedResults = orderedResults.map((result) => normalizeAgentRunResult(result, input2.budgetTracker.budget.maxFindingsPerAgent));
+  for (const result of normalizedResults) {
     const reservation = reservations.get(result.agent);
     if (!reservation)
       continue;
@@ -211191,7 +211755,7 @@ async function runAgents(input2) {
       input2.budgetTracker.markIncomplete("coverage_incomplete");
     }
   }
-  await Promise.all(orderedResults.map((result) => {
+  await Promise.all(normalizedResults.map((result) => {
     const event = {
       type: "agent_completed",
       traceId: input2.traceId,
@@ -211206,12 +211770,20 @@ async function runAgents(input2) {
       event.errorCode = result.error.code;
       event.errorDetail = result.error.detail;
     }
+    if (result.salvaged !== undefined)
+      event.salvaged = result.salvaged;
+    if (result.reportedFindings !== undefined) {
+      event.reportedFindings = result.reportedFindings;
+    }
+    if (result.findingsTargetExceeded !== undefined) {
+      event.findingsTargetExceeded = result.findingsTargetExceeded;
+    }
     if (input2.config.audit.includeRawAgentOutput && result.rawText) {
       event.rawText = sanitizeTextForRawOutput(result.rawText);
     }
     return input2.trace.write(event);
   }));
-  return orderedResults;
+  return normalizedResults;
 }
 async function skipReservedPrimaryAgents(input2) {
   const results = [];
@@ -211261,20 +211833,44 @@ async function finalizeModelCallResult(input2) {
     });
     return;
   }
-  input2.budgetTracker.markStarted(input2.reservation);
+  input2.budgetTracker.markStarted(input2.reservation, input2.result.executionIdentity);
   const usage = normalizeModelTokenUsage(input2.result.usage);
-  const outputBytes = input2.result.outputBytes ?? (input2.result.rawText ? Buffer.byteLength(input2.result.rawText, "utf8") : undefined);
+  const { messageBytes, thoughtBytes, outputBytes } = resolveOutputByteMetrics(input2.result);
+  const warningThreshold = input2.budgetTracker.budget.effectiveWarnAgentOutputBytes;
+  const warningTriggered = warningThreshold !== undefined && outputBytes !== undefined && (input2.result.outputWarningTriggered === true || outputBytes >= warningThreshold);
+  const outputWarningTriggered = warningTriggered || input2.result.outputWarningTriggered !== undefined ? warningTriggered : undefined;
   input2.budgetTracker.complete(input2.reservation, {
+    ...messageBytes === undefined ? {} : { messageBytes },
+    ...thoughtBytes === undefined ? {} : { thoughtBytes },
     ...outputBytes === undefined ? {} : { outputBytes },
+    ...outputWarningTriggered === undefined ? {} : { outputWarningTriggered },
+    ...input2.result.salvaged === undefined ? {} : { salvaged: input2.result.salvaged },
+    ...input2.result.reportedFindings === undefined ? {} : { reportedFindings: input2.result.reportedFindings },
+    ...input2.result.findingsTargetExceeded === undefined ? {} : { findingsTargetExceeded: input2.result.findingsTargetExceeded },
     ...usage ? { usage } : {},
+    ...input2.result.executionIdentity ? { executionIdentity: input2.result.executionIdentity } : {},
     ...input2.result.stopReason ? { stopReason: input2.result.stopReason } : {}
   });
+  const executionIdentity = input2.budgetTracker.executionIdentity(input2.reservation);
   if (input2.result.error?.code === "AGENT_OUTPUT_LIMIT") {
     input2.budgetTracker.markIncomplete("agent_output_limit");
   }
   if (input2.result.error?.code === "REVIEW_DEADLINE_EXCEEDED") {
     input2.budgetTracker.markIncomplete("deadline");
   }
+  if (outputWarningTriggered && warningThreshold !== undefined && messageBytes !== undefined && thoughtBytes !== undefined && outputBytes !== undefined) {
+    await input2.trace.write({
+      type: "agent_output_warning",
+      traceId: input2.traceId,
+      kind: input2.reservation.kind,
+      agent: input2.reservation.agent,
+      thresholdBytes: warningThreshold,
+      messageBytes,
+      thoughtBytes,
+      outputBytes,
+      timestamp: new Date().toISOString()
+    });
+  }
   await input2.trace.write({
     type: "model_call_completed",
     traceId: input2.traceId,
@@ -211282,12 +211878,55 @@ async function finalizeModelCallResult(input2) {
     agent: input2.reservation.agent,
     resultStatus: input2.result.status,
     ...input2.result.error?.code ? { errorCode: input2.result.error.code } : {},
+    ...messageBytes === undefined ? {} : { messageBytes },
+    ...thoughtBytes === undefined ? {} : { thoughtBytes },
     ...outputBytes === undefined ? {} : { outputBytes },
+    ...outputWarningTriggered === undefined ? {} : { outputWarningTriggered },
+    ...input2.result.salvaged === undefined ? {} : { salvaged: input2.result.salvaged },
+    ...input2.result.reportedFindings === undefined ? {} : { reportedFindings: input2.result.reportedFindings },
+    ...input2.result.findingsTargetExceeded === undefined ? {} : { findingsTargetExceeded: input2.result.findingsTargetExceeded },
     ...usage ? { usage } : {},
+    ...executionIdentity ? { executionIdentity } : {},
     ...input2.result.stopReason ? { stopReason: input2.result.stopReason } : {},
     timestamp: new Date().toISOString()
   });
 }
+function buildAgentStartedEvent(input2) {
+  const executionIdentity = normalizeModelExecutionIdentity(input2.executionIdentity);
+  return {
+    type: "agent_started",
+    traceId: input2.traceId,
+    agent: input2.agent,
+    role: input2.role,
+    ...executionIdentity ? { executionIdentity } : {},
+    ...executionIdentity?.requestedModel ? { model: executionIdentity.requestedModel } : {},
+    ...executionIdentity?.providerRoute === "openrouter" ? { provider: "openrouter" } : {},
+    timestamp: new Date().toISOString()
+  };
+}
+function resolveOutputByteMetrics(result) {
+  const rawTextBytes = result.rawText ? Buffer.byteLength(result.rawText, "utf8") : undefined;
+  let messageBytes = result.messageBytes;
+  let thoughtBytes = result.thoughtBytes;
+  if (messageBytes === undefined && thoughtBytes === undefined) {
+    if (rawTextBytes !== undefined) {
+      messageBytes = rawTextBytes;
+      thoughtBytes = result.outputBytes === undefined ? 0 : Math.max(0, result.outputBytes - rawTextBytes);
+    } else if (result.outputBytes !== undefined) {
+      messageBytes = result.outputBytes;
+      thoughtBytes = 0;
+    }
+  } else if (messageBytes === undefined) {
+    messageBytes = result.outputBytes === undefined ? rawTextBytes ?? 0 : Math.max(0, result.outputBytes - (thoughtBytes ?? 0));
+  } else if (thoughtBytes === undefined) {
+    thoughtBytes = result.outputBytes === undefined ? 0 : Math.max(0, result.outputBytes - messageBytes);
+  }
+  return {
+    ...messageBytes === undefined ? {} : { messageBytes },
+    ...thoughtBytes === undefined ? {} : { thoughtBytes },
+    ...messageBytes === undefined || thoughtBytes === undefined ? {} : { outputBytes: messageBytes + thoughtBytes }
+  };
+}
 function isPreflightAgentFailure(result) {
   return result.status === "failed" && [
     "AGENT_CONFIG_INVALID",
@@ -211365,24 +212004,11 @@ function normalizeAgentRunResult(result, maxFindingsPerAgent) {
     ...result,
     normalized: normalizeAgentOutput(result.agent, result.role, result.rawText)
   } : result;
-  const normalized = normalizedResult.normalized;
-  const findings = normalized?.findings;
-  if (!normalized || !findings || findings.length <= maxFindingsPerAgent) {
-    return { result: normalizedResult, findingsCapped: false };
-  }
-  const limitedFindings = findings.map((finding, index) => ({ finding, index })).sort((left, right) => {
-    const severity = compareSeverity(left.finding.severity, right.finding.severity);
-    return severity === 0 ? left.index - right.index : severity;
-  }).slice(0, maxFindingsPerAgent).map(({ finding }) => finding);
-  return {
-    result: {
-      ...normalizedResult,
-      normalized: {
-        ...normalized,
-        findings: limitedFindings
-      }
-    },
-    findingsCapped: true
+  const reportedFindings = normalizedResult.normalized?.findings.length;
+  return reportedFindings === undefined ? normalizedResult : {
+    ...normalizedResult,
+    reportedFindings,
+    findingsTargetExceeded: reportedFindings > maxFindingsPerAgent
   };
 }
 function agentOpinionSummary(result, includeRawText = false) {
@@ -211391,7 +212017,8 @@ function agentOpinionSummary(result, includeRawText = false) {
     role: result.role,
     summary: result.normalized?.summary ?? sanitizeTextForDisplay(result.error?.message ?? result.status),
     status: result.status,
-    errorCode: result.error?.code
+    errorCode: result.error?.code,
+    ...result.salvaged === undefined ? {} : { salvaged: result.salvaged }
   };
   if (includeRawText && result.rawText) {
     opinion.rawText = sanitizeTextForRawOutput(result.rawText);
@@ -211593,12 +212220,60 @@ async function writeReviewBudgetPlanned(input2) {
     requestFingerprint: input2.requestFingerprint,
     maxModelCalls: snapshot.executionBudget.maxModelCalls,
     maxTotalWallTimeMs: snapshot.executionBudget.wallTime.limitMs,
+    ...snapshot.executionBudget.effectiveWarnAgentOutputBytes !== undefined ? {
+      effectiveWarnAgentOutputBytes: snapshot.executionBudget.effectiveWarnAgentOutputBytes
+    } : {},
     maxAgentOutputBytes: snapshot.executionBudget.maxAgentOutputBytes,
     maxFindingsPerAgent: snapshot.executionBudget.maxFindingsPerAgent,
     skipOptionalPhasesWhenTokenUsageUnknown: snapshot.executionBudget.skipOptionalPhasesWhenTokenUsageUnknown,
+    ...snapshot.executionBudget.modelCallPlan,
     timestamp: new Date().toISOString()
   });
 }
+function plannedBudgetWarnings(budgetTracker) {
+  const fallbackCalls = budgetTracker.modelCallPlan.ceilingEffects.filter((effect) => effect.kind === "judge" && effect.action === "deterministic_fallback" && effect.reason === "model_call_budget").reduce((total, effect) => total + effect.calls, 0);
+  if (fallbackCalls === 0)
+    return [];
+  return [
+    `The potential model-call plan requires ${budgetTracker.modelCallPlan.potentialTotalCalls} calls, above maxModelCalls=${budgetTracker.budget.maxModelCalls}; ${fallbackCalls} LLM judge call(s) will use deterministic fallback if higher-priority calls consume the available capacity.`
+  ];
+}
+function outputWarningMessages(snapshot) {
+  const threshold = snapshot.executionBudget.effectiveWarnAgentOutputBytes;
+  if (threshold === undefined)
+    return [];
+  return snapshot.modelCalls.flatMap((call) => {
+    if (call.status !== "completed" || !call.outputWarningTriggered || !call.agent) {
+      return [];
+    }
+    const messageBytes = call.messageBytes ?? 0;
+    const thoughtBytes = call.thoughtBytes ?? 0;
+    const outputBytes = call.outputBytes ?? messageBytes + thoughtBytes;
+    const outcome = call.stopReason === "cancelled" ? "the hard breaker subsequently stopped execution." : "execution continued.";
+    return [
+      `Agent ${call.agent} ${call.kind} output reached the ${threshold}-byte soft threshold (message: ${messageBytes}, thought: ${thoughtBytes}, total: ${outputBytes}); ${outcome}`
+    ];
+  });
+}
+function tokenUsageWarningMessages(budgetTracker, snapshot) {
+  const unknownCalls = snapshot.executionBudget.tokenUsage.unknownCalls;
+  if (budgetTracker.budget.skipOptionalPhasesWhenTokenUsageUnknown || unknownCalls === 0) {
+    return [];
+  }
+  return [
+    `Token usage was not reported for ${unknownCalls} completed call(s); budget enforcement continued using calls, wall time, and bytes.`
+  ];
+}
+function configuredReviewModelCallPlan(config2, budget, env, requestedJudgeProvider) {
+  const judgeRoute = resolveJudgeCallRoute(config2.judge.mode, requestedJudgeProvider ?? config2.judge.provider, env);
+  return buildReviewModelCallPlan({
+    maxModelCalls: budget.maxModelCalls,
+    requiredPrimaryCalls: Object.values(config2.agents).filter((agent) => agent.enabled).length,
+    verificationEnabled: config2.verification.enabled,
+    verificationMaxFindings: config2.verification.maxFindings,
+    llmJudgeAvailable: judgeRoute.llmAvailable
+  });
+}
 async function writeReviewBudgetCompleted(input2) {
   const snapshot = input2.budgetTracker.snapshot();
   await input2.trace.write({