@qwen-code/qwen-code 0.21.7-nightly.20260808.4ec0371e6 → 0.21.8

package/chunks/{chunk-IMK3SJ43.js → chunk-7VUERJHS.js}

@@ -2,13 +2,13 @@
 "use strict";
 import {
   serveCommand
-} from "./chunk-LMEIS6WW.js";
+} from "./chunk-HWX5HPUG.js";
 import {
   listCommand
-} from "./chunk-MV7VUCIG.js";
+} from "./chunk-EIVICVHM.js";
 import {
   getErrorMessage as getErrorMessage2
-} from "./chunk-H2352CX2.js";
+} from "./chunk-IYES5WOT.js";
 import {
   OBSERVED_CONTACT_MAX_FRESH_WITHIN_SECONDS,
   ObservedChannelContactStore
@@ -29,7 +29,7 @@ import {
   collectProviderModelsForProtocol,
   getAuthTypeFromEnv,
   resolveCliGenerationConfig
-} from "./chunk-XIDHBXUI.js";
+} from "./chunk-GBDINRIL.js";
 import {
   resolvePath
 } from "./chunk-AOHJKPKL.js";
@@ -52,17 +52,17 @@ import {
   registerToolCallDispatch,
   selectFirstModel,
   sessionsPath
-} from "./chunk-JACAHYEN.js";
+} from "./chunk-E4ZBKMSF.js";
 import {
   getExtensionManager,
   requestChoicePluginNonInteractive,
   requestConsentNonInteractive,
   requestConsentOrFail,
   resolveExtensionCommandScope
-} from "./chunk-HY2INPTA.js";
+} from "./chunk-QQWD7LZV.js";
 import {
   parseChannelConfig
-} from "./chunk-P74TZRXD.js";
+} from "./chunk-QXVSWG66.js";
 import {
   findCliEntryPath
 } from "./chunk-V6WHFGST.js";
@@ -132,35 +132,36 @@ import {
   assembleMcpServers,
   getPendingGatedMcpServers,
   mcpCommand
-} from "./chunk-4QJJHIZ5.js";
+} from "./chunk-Y4TETC74.js";
 import {
   loadSettings
-} from "./chunk-77WOUGCA.js";
+} from "./chunk-OHKJVAKG.js";
 import {
   detectSystemLanguage,
   getCurrentLanguage,
   initializeI18n,
   resolveLanguageSetting,
   t
-} from "./chunk-TAOSTUHI.js";
+} from "./chunk-PG62DFWD.js";
 import {
   loadEnvironment
-} from "./chunk-KPMB4JEZ.js";
+} from "./chunk-B52AWKBB.js";
 import {
-  resolveAcpChannelFallback
-} from "./chunk-ALFTV7GA.js";
+  resolveAcpChannelFallback,
+  scrubAndReportInheritedLoaderEnv
+} from "./chunk-UA5H3DS2.js";
 import {
   getCliVersion
-} from "./chunk-Z6W3XDLN.js";
+} from "./chunk-FN6YXJOP.js";
 import {
   getPackageJson
 } from "./chunk-VJNBRRZG.js";
 import {
   isWorkspaceTrusted
-} from "./chunk-3ARO4N5G.js";
+} from "./chunk-HA3SAB64.js";
 import {
   require_strip_json_comments
-} from "./chunk-ALGGS7UH.js";
+} from "./chunk-NPQ5ZKRP.js";
 import {
   hideBin,
   yargs_default
@@ -199,7 +200,7 @@ import {
   unquoteCStylePath,
   updateChannelMemoryEntry,
   updateSetting
-} from "./chunk-BFSQBXHV.js";
+} from "./chunk-GXSNGY5M.js";
 import {
   nextFireTime,
   parseCron
@@ -215,14 +216,14 @@ import {
   getAllGeminiMdFilenames,
   parseLineTolerant,
   setGeminiMdFilename
-} from "./chunk-XCG76UE6.js";
+} from "./chunk-3PY4LPJF.js";
 import {
   SchemaValidator,
   ToolNames
 } from "./chunk-PYQADEFD.js";
 import {
   DEFAULT_QWEN_EMBEDDING_MODEL
-} from "./chunk-P7HUJDBZ.js";
+} from "./chunk-F6WFNA7U.js";
 import {
   isTlsVerificationDisabled
 } from "./chunk-KKBPOU75.js";
@@ -2729,7 +2730,7 @@ var stopCommand = {
     if (argv["daemon-url"]) {
       const token = argv.token ?? process.env[QWEN_SERVER_TOKEN_ENV] ?? process.env[QWEN_DAEMON_TOKEN_ENV];
       try {
-        const sdk = await import("./daemon-SCTQMM7Z.js");
+        const sdk = await import("./daemon-VZBGJUNL.js");
         const client = new sdk.DaemonClient({
           baseUrl: argv["daemon-url"],
           ...token ? { token } : {}
@@ -2915,7 +2916,7 @@ var statusCommand = {
     if (argv["daemon-url"]) {
       const token = argv.token ?? process.env[QWEN_SERVER_TOKEN_ENV] ?? process.env[QWEN_DAEMON_TOKEN_ENV];
       try {
-        const sdk = await import("./daemon-SCTQMM7Z.js");
+        const sdk = await import("./daemon-VZBGJUNL.js");
         const client = new sdk.DaemonClient({
           baseUrl: argv["daemon-url"],
           ...token ? { token } : {}
@@ -3026,7 +3027,7 @@ var reloadCommand = {
     const token = resolveToken(argv.token);
     let sdk;
     try {
-      sdk = await import("./daemon-SCTQMM7Z.js");
+      sdk = await import("./daemon-VZBGJUNL.js");
     } catch (err) {
       writeStderrLine(
         `[Channel] Failed to load daemon SDK: ${safeChannelCommandErrorMessage(err)}`
@@ -3106,7 +3107,7 @@ var setCommand2 = {
     const selection = names[0] === "all" ? { mode: "all" } : { mode: "names", names };
     let sdk;
     try {
-      sdk = await import("./daemon-SCTQMM7Z.js");
+      sdk = await import("./daemon-VZBGJUNL.js");
     } catch (error) {
       writeStderrLine(
         `[Channel] Failed to load daemon SDK: ${safeChannelCommandErrorMessage(error)}`
@@ -3232,7 +3233,7 @@ function createDaemonChannelBridgeFacade(bridge, opts) {
 }
 __name(createDaemonChannelBridgeFacade, "createDaemonChannelBridgeFacade");
 async function loadDaemonSdk() {
-  return await import("./daemon-SCTQMM7Z.js");
+  return await import("./daemon-VZBGJUNL.js");
 }
 __name(loadDaemonSdk, "loadDaemonSdk");
 function selectedChannelNames(channelsConfig, selection) {
@@ -3792,6 +3793,11 @@ var daemonWorkerCommand = {
     try {
       assertInternalDaemonWorkerInvocation();
       const { daemonToken, daemonUrl, workspace } = readDaemonWorkerEnv();
+      scrubAndReportInheritedLoaderEnv(
+        process.env,
+        "qwen channel daemon-worker",
+        "channel daemon worker"
+      );
       const send = process.send;
       channelLoopMcpHost = new ChannelLoopMcpWorkerHost(
         (message, callback) => send.call(process, message, callback ?? (() => {
@@ -4829,224 +4835,587 @@ var parseArgsCommand = {
   }, "handler")
 };
 
-// packages/cli/src/commands/review/compose-review.ts
-init_esbuild_shims();
-import { mkdirSync as mkdirSync6, readFileSync as readFileSync10, writeFileSync as writeFileSync6 } from "node:fs";
-import { dirname as dirname5, join as join10 } from "node:path";
-
-// packages/cli/src/commands/review/lib/coverage.ts
+// packages/cli/src/commands/review/match-remote.ts
 init_esbuild_shims();
-import { readFileSync as readFileSync9, statSync as statSync5 } from "node:fs";
 
-// packages/cli/src/commands/review/lib/transcripts.ts
+// packages/cli/src/commands/review/lib/gh.ts
 init_esbuild_shims();
-import { readFileSync as readFileSync5, readdirSync as readdirSync3, statSync as statSync2 } from "node:fs";
-import { join as join6 } from "node:path";
-var TranscriptsUnavailableError = class extends Error {
-  static {
-    __name(this, "TranscriptsUnavailableError");
-  }
-};
-function transcriptPaths(env = process.env) {
-  const projectDir = env["QWEN_CODE_PROJECT_DIR"]?.trim();
-  const sessionId = env["QWEN_CODE_SESSION_ID"]?.trim();
-  if (!projectDir || !sessionId) {
-    throw new TranscriptsUnavailableError(
-      "the CLI did not export QWEN_CODE_PROJECT_DIR / QWEN_CODE_SESSION_ID, so this run cannot find the harness's record of what its agents did"
-    );
-  }
-  return {
-    projectDir,
-    sessionId,
-    dir: join6(projectDir, "subagents", sessionId)
-  };
-}
-__name(transcriptPaths, "transcriptPaths");
-function transcriptDir(env = process.env) {
-  return transcriptPaths(env).dir;
-}
-__name(transcriptDir, "transcriptDir");
-function textOf(rec) {
-  const msg = rec["message"];
-  const parts = Array.isArray(msg?.parts) ? msg.parts : [];
-  return parts.map((p) => p.text).filter((t2) => typeof t2 === "string").join("");
-}
-__name(textOf, "textOf");
-function isErrorPart(part) {
-  const resp = part.functionResponse?.response;
-  return !!resp && resp["error"] !== void 0 && resp["error"] !== null;
+import { execFileSync as execFileSync2 } from "node:child_process";
+var MAX_RETRIES = 2;
+var BASE_DELAY_MS = 3e3;
+function sleepSync(ms) {
+  Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms);
 }
-__name(isErrorPart, "isErrorPart");
-function rangeOf(args) {
-  const offset = args["offset"];
-  const limit = args["limit"];
-  if (typeof limit !== "number" || !Number.isInteger(limit) || limit <= 0) {
-    return null;
-  }
-  const off = typeof offset === "number" && Number.isInteger(offset) && offset >= 0 ? offset : 0;
-  return [off + 1, off + limit];
+__name(sleepSync, "sleepSync");
+var TRANSIENT_RE = /HTTP 5\d{2}|server is currently unavailable|service unavailable|bad gateway|internal server error/i;
+function isTransientGhError(err) {
+  const stderr = typeof err.stderr === "string" ? err.stderr : "";
+  const msg = err instanceof Error ? err.message : "";
+  return TRANSIENT_RE.test(stderr) || TRANSIENT_RE.test(msg);
 }
-__name(rangeOf, "rangeOf");
-function parseTranscript(file, diffPath) {
-  let raw;
-  try {
-    raw = readFileSync5(file, "utf8");
-  } catch {
-    return null;
-  }
-  const lines = raw.split("\n").filter((l) => l.trim());
-  if (lines.length === 0) return null;
-  let agentId = "";
-  let agentName = "";
-  let launchPrompt = "";
-  let finalText = "";
-  let successfulToolCalls = 0;
-  let diffToolCalls = 0;
-  const diffReads = [];
-  const successfulCallArgs = [];
-  const successfulReadFileArgs = [];
-  const byId = /* @__PURE__ */ new Map();
-  const anonymous = [];
-  for (const line of lines) {
-    let rec;
+__name(isTransientGhError, "isTransientGhError");
+function execGhWithRetry(args, options) {
+  const execOptions = {
+    encoding: "utf8",
+    maxBuffer: 64 * 1024 * 1024,
+    env: ghEnv(),
+    ...options.input !== void 0 ? { input: options.input } : {}
+  };
+  for (let attempt = 0; ; attempt++) {
     try {
-      rec = JSON.parse(line);
-    } catch {
-      continue;
-    }
-    if (!agentId && typeof rec["agentId"] === "string")
-      agentId = rec["agentId"];
-    if (!agentName && typeof rec["agentName"] === "string") {
-      agentName = rec["agentName"];
-    }
-    const type = rec["type"];
-    if (!launchPrompt && type === "user") launchPrompt = textOf(rec);
-    const msg = rec["message"];
-    const parts = Array.isArray(msg?.parts) ? msg.parts : [];
-    for (const part of parts) {
-      const fc = part.functionCall;
-      if (!fc) continue;
-      const args = fc.args ?? {};
-      const namedTheDiff = diffPath ? JSON.stringify(args).includes(JSON.stringify(diffPath)) : false;
-      const pending = {
-        namedTheDiff,
-        readFile: fc.name === ToolNames.READ_FILE,
-        range: namedTheDiff ? rangeOf(args) : null,
-        args: JSON.stringify(args)
-      };
-      if (typeof fc.id === "string" && fc.id) byId.set(fc.id, pending);
-      else anonymous.push(pending);
-    }
-    for (const part of parts) {
-      const fr = part.functionResponse;
-      if (!fr) continue;
-      let pending;
-      if (typeof fr.id === "string" && byId.has(fr.id)) {
-        pending = byId.get(fr.id);
-        byId.delete(fr.id);
-      } else if (anonymous.length > 0) {
-        pending = anonymous.shift();
-      } else {
+      return execFileSync2("gh", args, execOptions).replace(/\r\n/g, "\n").trim();
+    } catch (err) {
+      if (attempt < MAX_RETRIES && isTransientGhError(err)) {
+        const delay = BASE_DELAY_MS * (attempt + 1);
+        process.stderr.write(
+          `gh transient error (attempt ${attempt + 1}/${MAX_RETRIES}), retrying in ${delay}ms\u2026
+`
+        );
+        sleepSync(delay);
         continue;
       }
-      if (!isErrorPart(part)) {
-        successfulToolCalls++;
-        successfulCallArgs.push(pending.args);
-        if (pending.readFile) successfulReadFileArgs.push(pending.args);
-        if (pending.namedTheDiff) {
-          diffToolCalls++;
-          if (pending.range) diffReads.push(pending.range);
-        }
-      }
-    }
-    if (type === "assistant") {
-      const t2 = textOf(rec);
-      if (t2) finalText = t2;
+      throw err;
     }
   }
-  if (!agentId) return null;
-  let mtimeMs = 0;
-  try {
-    mtimeMs = statSync2(file).mtimeMs;
-  } catch {
-  }
-  return {
-    agentId,
-    agentName,
-    launchPrompt,
-    successfulToolCalls,
-    diffToolCalls,
-    diffReads,
-    successfulCallArgs,
-    successfulReadFileArgs,
-    finalText,
-    mtimeMs
-  };
 }
-__name(parseTranscript, "parseTranscript");
-function listAgentTranscriptFiles(dir) {
-  return readdirSync3(dir).filter((name) => name.endsWith(".jsonl"));
-}
-__name(listAgentTranscriptFiles, "listAgentTranscriptFiles");
-function readTranscripts(since, env = process.env, diffPath) {
-  const dir = transcriptDir(env);
-  let names;
-  try {
-    names = listAgentTranscriptFiles(dir);
-  } catch (err) {
-    throw new TranscriptsUnavailableError(
-      `no subagent transcripts at ${dir} (${err.message}). The harness writes one per agent; if there are none, either no agents ran or the harness could not write them.`
-    );
+__name(execGhWithRetry, "execGhWithRetry");
+var ghHost;
+var HOSTNAME_RE = /^[A-Za-z0-9.-]+(?::\d+)?$/;
+function setGhHost(host) {
+  if (host === void 0 || host === "") {
+    ghHost = void 0;
+    return;
   }
-  const out = [];
-  for (const name of names) {
-    const rec = parseTranscript(join6(dir, name), diffPath);
-    if (!rec) continue;
-    if (since !== void 0 && rec.mtimeMs < since) continue;
-    out.push(rec);
+  if (!HOSTNAME_RE.test(host)) {
+    throw new TypeError(
+      `--host must be a hostname (optionally :port), got ${JSON.stringify(host)}`
+    );
   }
-  return out;
+  ghHost = host;
 }
-__name(readTranscripts, "readTranscripts");
-function wasGivenTheDiff(rec, diffPath) {
-  const p = rec.launchPrompt;
-  if (!p) return false;
-  return p.includes(diffPath);
+__name(setGhHost, "setGhHost");
+function getGhHost() {
+  return ghHost;
 }
-__name(wasGivenTheDiff, "wasGivenTheDiff");
-
-// packages/cli/src/commands/review/lib/prompt-record.ts
-init_esbuild_shims();
-import {
-  mkdirSync as mkdirSync3,
-  readFileSync as readFileSync6,
-  readdirSync as readdirSync4,
-  statSync as statSync3,
-  writeFileSync as writeFileSync3
-} from "node:fs";
-import { dirname as dirname3, join as join7, basename as basename4, resolve as resolve4 } from "node:path";
-function promptRecordDir(planPath) {
-  const p = resolve4(planPath);
-  return join7(dirname3(p), `${basename4(p).replace(/\.json$/i, "")}-prompts`);
+__name(getGhHost, "getGhHost");
+function resolveGhHost(flagHost) {
+  return flagHost ?? (process.env["GH_HOST"]?.trim() || void 0);
 }
-__name(promptRecordDir, "promptRecordDir");
-var fileFor = /* @__PURE__ */ __name((key) => `${encodeURIComponent(key)}.txt`, "fileFor");
-function briefPath(planPath, key) {
-  return join7(promptRecordDir(planPath), `${encodeURIComponent(key)}.brief.md`);
+__name(resolveGhHost, "resolveGhHost");
+function ghEnv() {
+  return ghHost ? { ...process.env, GH_HOST: ghHost } : void 0;
 }
-__name(briefPath, "briefPath");
-function findingsFilePath(planPath, key) {
-  return join7(
-    promptRecordDir(planPath),
-    `${encodeURIComponent(key)}.findings.md`
-  );
+__name(ghEnv, "ghEnv");
+function gh(...args) {
+  return execGhWithRetry(args, {});
 }
-__name(findingsFilePath, "findingsFilePath");
-function findingsPointerOf(prompt) {
-  const m = /^read_file\(file_path="([^"]*\.findings\.md)"\)$/m.exec(prompt);
-  return m && m[1] !== void 0 ? m[1] : null;
+__name(gh, "gh");
+function ghWithInputRetried(input, ...args) {
+  return execGhWithRetry(args, { input });
 }
-__name(findingsPointerOf, "findingsPointerOf");
+__name(ghWithInputRetried, "ghWithInputRetried");
+function ghWithInput(input, ...args) {
+  return execFileSync2("gh", args, {
+    encoding: "utf8",
+    maxBuffer: 64 * 1024 * 1024,
+    env: ghEnv(),
+    input
+  }).replace(/\r\n/g, "\n").trim();
+}
+__name(ghWithInput, "ghWithInput");
+function ghApiAll(path3) {
+  const out = gh("api", "--paginate", path3);
+  if (!out) return [];
+  const parsed = JSON.parse(out);
+  return Array.isArray(parsed) ? parsed : [];
+}
+__name(ghApiAll, "ghApiAll");
+function ghApiAllNested(path3, key) {
+  return parseNdjson(gh("api", "--paginate", path3, "--jq", `.${key}[]`), {
+    strict: true
+  });
+}
+__name(ghApiAllNested, "ghApiAllNested");
+function parseNdjson(out, opts = {}) {
+  const strict = opts.strict ?? true;
+  if (!out) return [];
+  const values = [];
+  for (const line of out.split("\n")) {
+    if (line.trim().length === 0) continue;
+    if (strict) {
+      values.push(JSON.parse(line));
+      continue;
+    }
+    try {
+      values.push(JSON.parse(line));
+    } catch {
+    }
+  }
+  return values;
+}
+__name(parseNdjson, "parseNdjson");
+function currentUser() {
+  return gh("api", "user", "--jq", ".login");
+}
+__name(currentUser, "currentUser");
+function ensureAuthenticated() {
+  for (let attempt = 0; ; attempt++) {
+    try {
+      execFileSync2("gh", ["auth", "status"], { stdio: "pipe", env: ghEnv() });
+      return;
+    } catch (err) {
+      if (attempt === 0 && err.code !== "ENOENT") {
+        sleepSync(2e3);
+        continue;
+      }
+      throw new Error(
+        "gh CLI is not authenticated. Run `gh auth login` and retry."
+      );
+    }
+  }
+}
+__name(ensureAuthenticated, "ensureAuthenticated");
+
+// packages/cli/src/commands/review/lib/git.ts
+init_esbuild_shims();
+import { execFileSync as execFileSync3 } from "node:child_process";
+import { existsSync as existsSync4, rmSync as rmSync2 } from "node:fs";
+var GIT_TIMEOUT_MS2 = 12e4;
+function gitOpts() {
+  return {
+    timeout: GIT_TIMEOUT_MS2,
+    env: { ...process.env, GIT_TERMINAL_PROMPT: "0" }
+  };
+}
+__name(gitOpts, "gitOpts");
+function git(...args) {
+  return execFileSync3("git", args, { ...gitOpts(), encoding: "utf8" }).replace(/\r\n/g, "\n").trim();
+}
+__name(git, "git");
+function gitWithInput(input, args) {
+  return execFileSync3("git", args, { ...gitOpts(), encoding: "utf8", input }).replace(/\r\n/g, "\n").trim();
+}
+__name(gitWithInput, "gitWithInput");
+function gitOpt(...args) {
+  try {
+    return execFileSync3("git", args, {
+      ...gitOpts(),
+      encoding: "utf8",
+      stdio: ["ignore", "pipe", "pipe"]
+    }).replace(/\r\n/g, "\n").trim();
+  } catch {
+    return null;
+  }
+}
+__name(gitOpt, "gitOpt");
+function refExists(ref) {
+  return gitOpt("rev-parse", "--verify", "--quiet", ref) !== null;
+}
+__name(refExists, "refExists");
+function worktreeReleaseResult(existed, stillThere, removeError) {
+  const freed = existed && !stillThere;
+  if (!existed || freed) {
+    return { existed, freed, reason: void 0 };
+  }
+  return {
+    existed,
+    freed,
+    reason: removeError ? removeError instanceof Error ? removeError.message : String(removeError) : "the path is still there after `git worktree remove --force` and `rm -rf`"
+  };
+}
+__name(worktreeReleaseResult, "worktreeReleaseResult");
+function releaseWorktree(worktreePath2) {
+  const existed = existsSync4(worktreePath2);
+  let removeError;
+  if (existed) {
+    gitOpt("worktree", "remove", worktreePath2, "--force");
+    try {
+      rmSync2(worktreePath2, { recursive: true, force: true });
+    } catch (e) {
+      removeError = e;
+    }
+  }
+  gitOpt("worktree", "prune");
+  return worktreeReleaseResult(existed, existsSync4(worktreePath2), removeError);
+}
+__name(releaseWorktree, "releaseWorktree");
+function gitRaw(...args) {
+  return execFileSync3("git", args, {
+    ...gitOpts(),
+    maxBuffer: 512 * 1024 * 1024,
+    stdio: ["ignore", "pipe", "pipe"]
+  });
+}
+__name(gitRaw, "gitRaw");
+function gitRawTolerateDiff(...args) {
+  try {
+    return gitRaw(...args);
+  } catch (err) {
+    const e = err;
+    if (e.status === 1 && e.stdout && e.stdout.length > 0) return e.stdout;
+    throw err;
+  }
+}
+__name(gitRawTolerateDiff, "gitRawTolerateDiff");
+
+// packages/cli/src/commands/review/lib/remote-match.ts
+init_esbuild_shims();
+function normalizeSegment(value) {
+  const v = value.toLowerCase();
+  return v.endsWith(".git") ? v.slice(0, -4) : v;
+}
+__name(normalizeSegment, "normalizeSegment");
+function parseRemoteUrl(raw) {
+  const url = raw.trim();
+  if (url === "") return null;
+  let host;
+  let pathPart;
+  const schemeIdx = url.indexOf("://");
+  if (schemeIdx !== -1) {
+    let parsed;
+    try {
+      parsed = new URL(url);
+    } catch {
+      return null;
+    }
+    if (parsed.hostname === "") return null;
+    host = parsed.hostname;
+    pathPart = parsed.pathname;
+  } else {
+    const colonIdx = url.indexOf(":");
+    const slashIdx = url.indexOf("/");
+    if (colonIdx === -1 || slashIdx === -1 || colonIdx > slashIdx) {
+      return null;
+    }
+    host = url.slice(0, colonIdx);
+    const atIdx = host.lastIndexOf("@");
+    if (atIdx !== -1) host = host.slice(atIdx + 1);
+    pathPart = url.slice(colonIdx + 1);
+  }
+  const segments = pathPart.split("/").map((s) => s.trim()).filter((s) => s !== "");
+  if (segments.length !== 2) return null;
+  if (host === "") return null;
+  return {
+    host: host.toLowerCase(),
+    owner: normalizeSegment(segments[0]),
+    repo: normalizeSegment(segments[1])
+  };
+}
+__name(parseRemoteUrl, "parseRemoteUrl");
+function matchRemotes(remoteVOutput, { owner, repo, host = "github.com" }) {
+  const wantOwner = normalizeSegment(owner);
+  const wantRepo = normalizeSegment(repo);
+  const wantHost = normalizeSegment(host.replace(/:\d+$/, ""));
+  const matched = [];
+  for (const line of remoteVOutput.split("\n")) {
+    const trimmed = line.trim();
+    if (trimmed === "" || !/\(fetch\)(\s+\[[^\]]*\])?$/.test(trimmed)) {
+      continue;
+    }
+    const nameMatch = trimmed.match(
+      /^(\S+)\s+(.*)\s+\(fetch\)(\s+\[[^\]]*\])?$/
+    );
+    if (!nameMatch) continue;
+    const identity = parseRemoteUrl(nameMatch[2]);
+    if (identity === null) continue;
+    if (identity.host === wantHost && identity.owner === wantOwner && identity.repo === wantRepo) {
+      matched.push(nameMatch[1]);
+    }
+  }
+  return { matched };
+}
+__name(matchRemotes, "matchRemotes");
+
+// packages/cli/src/commands/review/match-remote.ts
+function runMatchRemote(args) {
+  try {
+    git("rev-parse", "--is-inside-work-tree");
+  } catch (err) {
+    writeStderrLineSafe(
+      `match-remote: git cannot resolve this repository: ${err.message}`
+    );
+    process.exitCode = 1;
+    return;
+  }
+  const host = resolveGhHost(args.host) ?? "github.com";
+  let remoteV;
+  try {
+    remoteV = git("remote", "-v");
+  } catch (err) {
+    writeStderrLineSafe(
+      `match-remote: \`git remote -v\` failed: ${err.message}`
+    );
+    process.exitCode = 1;
+    return;
+  }
+  const { matched } = matchRemotes(remoteV, {
+    owner: args.owner,
+    repo: args.repo,
+    host
+  });
+  if (matched.length === 1) {
+    writeStdoutLine(matched[0]);
+    return;
+  }
+  if (matched.length === 0) {
+    writeStdoutLine("none");
+    writeStderrLineSafe(
+      `match-remote: no remote matches ${host}/${args.owner}/${args.repo} by exact host + owner/repo equality \u2014 the PR is not served by any remote of this repository.`
+    );
+    process.exitCode = 6;
+    return;
+  }
+  for (const name of matched) {
+    writeStdoutLine(name);
+  }
+  writeStderrLineSafe(
+    `warning: ${matched.length} remotes match ${host}/${args.owner}/${args.repo} (${matched.join(", ")}); refusing to pick one \u2014 the review stops here.`
+  );
+  process.exitCode = 7;
+}
+__name(runMatchRemote, "runMatchRemote");
+var matchRemoteCommand = {
+  command: "match-remote",
+  describe: "Print the git remote whose URL matches an owner/repo by exact host + owner/repo equality (exit 6 when none, exit 7 when several)",
+  builder: /* @__PURE__ */ __name((yargs) => yargs.option("owner", {
+    type: "string",
+    demandOption: true,
+    describe: "The repository owner (from the PR URL, or `gh repo view`)"
+  }).option("repo", {
+    type: "string",
+    demandOption: true,
+    describe: "The repository name"
+  }).option("host", {
+    type: "string",
+    describe: "The PR's host \u2014 from its URL, or from `gh repo view` for a bare number (omitted: inherit an operator-exported GH_HOST, else github.com)"
+  }), "builder"),
+  handler: /* @__PURE__ */ __name((argv) => {
+    runMatchRemote({
+      owner: String(argv["owner"]),
+      repo: String(argv["repo"]),
+      host: argv.host
+    });
+  }, "handler")
+};
+
+// packages/cli/src/commands/review/compose-review.ts
+init_esbuild_shims();
+import { mkdirSync as mkdirSync6, readFileSync as readFileSync10, writeFileSync as writeFileSync6 } from "node:fs";
+import { dirname as dirname5, join as join10 } from "node:path";
+
+// packages/cli/src/commands/review/lib/coverage.ts
+init_esbuild_shims();
+import { readFileSync as readFileSync9, statSync as statSync5 } from "node:fs";
+
+// packages/cli/src/commands/review/lib/transcripts.ts
+init_esbuild_shims();
+import { readFileSync as readFileSync5, readdirSync as readdirSync3, statSync as statSync2 } from "node:fs";
+import { join as join6 } from "node:path";
+var TranscriptsUnavailableError = class extends Error {
+  static {
+    __name(this, "TranscriptsUnavailableError");
+  }
+};
+function transcriptPaths(env = process.env) {
+  const projectDir = env["QWEN_CODE_PROJECT_DIR"]?.trim();
+  const sessionId = env["QWEN_CODE_SESSION_ID"]?.trim();
+  if (!projectDir || !sessionId) {
+    throw new TranscriptsUnavailableError(
+      "the CLI did not export QWEN_CODE_PROJECT_DIR / QWEN_CODE_SESSION_ID, so this run cannot find the harness's record of what its agents did"
+    );
+  }
+  return {
+    projectDir,
+    sessionId,
+    dir: join6(projectDir, "subagents", sessionId)
+  };
+}
+__name(transcriptPaths, "transcriptPaths");
+function transcriptDir(env = process.env) {
+  return transcriptPaths(env).dir;
+}
+__name(transcriptDir, "transcriptDir");
+function textOf(rec) {
+  const msg = rec["message"];
+  const parts = Array.isArray(msg?.parts) ? msg.parts : [];
+  return parts.map((p) => p.text).filter((t2) => typeof t2 === "string").join("");
+}
+__name(textOf, "textOf");
+function isErrorPart(part) {
+  const resp = part.functionResponse?.response;
+  return !!resp && resp["error"] !== void 0 && resp["error"] !== null;
+}
+__name(isErrorPart, "isErrorPart");
+function rangeOf(args) {
+  const offset = args["offset"];
+  const limit = args["limit"];
+  if (typeof limit !== "number" || !Number.isInteger(limit) || limit <= 0) {
+    return null;
+  }
+  const off = typeof offset === "number" && Number.isInteger(offset) && offset >= 0 ? offset : 0;
+  return [off + 1, off + limit];
+}
+__name(rangeOf, "rangeOf");
+function parseTranscript(file, diffPath) {
+  let raw;
+  try {
+    raw = readFileSync5(file, "utf8");
+  } catch {
+    return null;
+  }
+  const lines = raw.split("\n").filter((l) => l.trim());
+  if (lines.length === 0) return null;
+  let agentId = "";
+  let agentName = "";
+  let launchPrompt = "";
+  let finalText = "";
+  let successfulToolCalls = 0;
+  let diffToolCalls = 0;
+  const diffReads = [];
+  const successfulCallArgs = [];
+  const successfulReadFileArgs = [];
+  const byId = /* @__PURE__ */ new Map();
+  const anonymous = [];
+  for (const line of lines) {
+    let rec;
+    try {
+      rec = JSON.parse(line);
+    } catch {
+      continue;
+    }
+    if (!agentId && typeof rec["agentId"] === "string")
+      agentId = rec["agentId"];
+    if (!agentName && typeof rec["agentName"] === "string") {
+      agentName = rec["agentName"];
+    }
+    const type = rec["type"];
+    if (!launchPrompt && type === "user") launchPrompt = textOf(rec);
+    const msg = rec["message"];
+    const parts = Array.isArray(msg?.parts) ? msg.parts : [];
+    for (const part of parts) {
+      const fc = part.functionCall;
+      if (!fc) continue;
+      const args = fc.args ?? {};
+      const namedTheDiff = diffPath ? JSON.stringify(args).includes(JSON.stringify(diffPath)) : false;
+      const pending = {
+        namedTheDiff,
+        readFile: fc.name === ToolNames.READ_FILE,
+        range: namedTheDiff ? rangeOf(args) : null,
+        args: JSON.stringify(args)
+      };
+      if (typeof fc.id === "string" && fc.id) byId.set(fc.id, pending);
+      else anonymous.push(pending);
+    }
+    for (const part of parts) {
+      const fr = part.functionResponse;
+      if (!fr) continue;
+      let pending;
+      if (typeof fr.id === "string" && byId.has(fr.id)) {
+        pending = byId.get(fr.id);
+        byId.delete(fr.id);
+      } else if (anonymous.length > 0) {
+        pending = anonymous.shift();
+      } else {
+        continue;
+      }
+      if (!isErrorPart(part)) {
+        successfulToolCalls++;
+        successfulCallArgs.push(pending.args);
+        if (pending.readFile) successfulReadFileArgs.push(pending.args);
+        if (pending.namedTheDiff) {
+          diffToolCalls++;
+          if (pending.range) diffReads.push(pending.range);
+        }
+      }
+    }
+    if (type === "assistant") {
+      const t2 = textOf(rec);
+      if (t2) finalText = t2;
+    }
+  }
+  if (!agentId) return null;
+  let mtimeMs = 0;
+  try {
+    mtimeMs = statSync2(file).mtimeMs;
+  } catch {
+  }
+  return {
+    agentId,
+    agentName,
+    launchPrompt,
+    successfulToolCalls,
+    diffToolCalls,
+    diffReads,
+    successfulCallArgs,
+    successfulReadFileArgs,
+    finalText,
+    mtimeMs
+  };
+}
+__name(parseTranscript, "parseTranscript");
+function listAgentTranscriptFiles(dir) {
+  return readdirSync3(dir).filter((name) => name.endsWith(".jsonl"));
+}
+__name(listAgentTranscriptFiles, "listAgentTranscriptFiles");
+function readTranscripts(since, env = process.env, diffPath) {
+  const dir = transcriptDir(env);
+  let names;
+  try {
+    names = listAgentTranscriptFiles(dir);
+  } catch (err) {
+    throw new TranscriptsUnavailableError(
+      `no subagent transcripts at ${dir} (${err.message}). The harness writes one per agent; if there are none, either no agents ran or the harness could not write them.`
+    );
+  }
+  const out = [];
+  for (const name of names) {
+    const rec = parseTranscript(join6(dir, name), diffPath);
+    if (!rec) continue;
+    if (since !== void 0 && rec.mtimeMs < since) continue;
+    out.push(rec);
+  }
+  return out;
+}
+__name(readTranscripts, "readTranscripts");
+function wasGivenTheDiff(rec, diffPath) {
+  const p = rec.launchPrompt;
+  if (!p) return false;
+  return p.includes(diffPath);
+}
+__name(wasGivenTheDiff, "wasGivenTheDiff");
+
+// packages/cli/src/commands/review/lib/prompt-record.ts
+init_esbuild_shims();
+import {
+  mkdirSync as mkdirSync3,
+  readFileSync as readFileSync6,
+  readdirSync as readdirSync4,
+  statSync as statSync3,
+  writeFileSync as writeFileSync3
+} from "node:fs";
+import { dirname as dirname3, join as join7, basename as basename4, resolve as resolve4 } from "node:path";
+function promptRecordDir(planPath) {
+  const p = resolve4(planPath);
+  return join7(dirname3(p), `${basename4(p).replace(/\.json$/i, "")}-prompts`);
+}
+__name(promptRecordDir, "promptRecordDir");
+var fileFor = /* @__PURE__ */ __name((key) => `${encodeURIComponent(key)}.txt`, "fileFor");
+function briefPath(planPath, key) {
+  return join7(promptRecordDir(planPath), `${encodeURIComponent(key)}.brief.md`);
+}
+__name(briefPath, "briefPath");
+function findingsFilePath(planPath, key) {
+  return join7(
+    promptRecordDir(planPath),
+    `${encodeURIComponent(key)}.findings.md`
+  );
+}
+__name(findingsFilePath, "findingsFilePath");
+function findingsPointerOf(prompt) {
+  const m = /^read_file\(file_path="([^"]*\.findings\.md)"\)$/m.exec(prompt);
+  return m && m[1] !== void 0 ? m[1] : null;
+}
+__name(findingsPointerOf, "findingsPointerOf");
 function writeFindingsFile(planPath, key, content) {
   const p = findingsFilePath(planPath, key);
   try {
@@ -5177,6 +5546,10 @@ __name(isRepositoryContextRoleId, "isRepositoryContextRoleId");
 var REVERSE_AUDIT_EXAMPLE_RECEIPT = "No issues found \u2014 re-walked the reconnect state machine and the two changed exports' call sites; every gap I checked was already in the list";
 var BRIEFS = {
   "0": {
+    // Budget-exempt: Issue-sized mandatory work, not diff-sized: a small bugfix
+    // referencing many issues would exhaust a diff-derived ceiling on
+    // required fetches alone.
+    budgetExempt: true,
     label: "Agent 0: Issue fidelity & root-cause ownership",
     publicLabel: "the linked-issue fidelity pass",
     publicLabelZh: "\u5173\u8054 issue \u4E00\u81F4\u6027\u68C0\u67E5",
@@ -5467,6 +5840,10 @@ Under that framing, look at:
 You are undirected on purpose. Do not restrict yourself to the list.`
   },
   "7": {
+    // Budget-exempt: Deterministic build/test commands — the run costs what the
+    // project scripts cost, and stopping early is the one thing it must
+    // never do.
+    budgetExempt: true,
     label: "Agent 7: Build & test verification",
     publicLabel: "the build-and-test check",
     publicLabelZh: "\u6784\u5EFA\u4E0E\u6D4B\u8BD5\u9A8C\u8BC1",
@@ -5551,6 +5928,9 @@ This file is largely rewritten, and reviewing it as a diff is the wrong frame. T
 Report a **Critical** for each violation, and give **both** locations that together make it a bug (\`<file>:<lineA>\` and \`<file>:<lineB>\`), not just one.`
   },
   verify: {
+    // Budget-exempt: Its per-finding re-trace must not stop early; `verifyShard`
+    // already governs its load.
+    budgetExempt: true,
     reviewsCode: true,
     output: "verdicts",
     acceptsFindings: true,
@@ -5811,7 +6191,7 @@ import {
   writeFileSync as writeFileSync4,
   mkdirSync as mkdirSync4,
   mkdtempSync,
-  rmSync as rmSync2,
+  rmSync as rmSync3,
   lstatSync,
   realpathSync as realpathSync2,
   openSync,
@@ -6286,7 +6666,7 @@ function emptyHadolintConfig() {
       const d = mkdtempSync(join8(tmpdir(), "qwen-review-hadolint-"));
       process.on("exit", () => {
         try {
-          rmSync2(d, { recursive: true, force: true });
+          rmSync3(d, { recursive: true, force: true });
         } catch {
         }
       });
@@ -6831,31 +7211,182 @@ function writeBudgetStop(planPath, spent, round, nowMs = Date.now()) {
   } catch {
   }
 }
-__name(writeBudgetStop, "writeBudgetStop");
-function readBudgetStop(planPath) {
-  try {
-    const raw = readFileSync8(
-      join9(promptRecordDir(planPath), STOP_FILE),
-      "utf8"
-    );
-    const parsed = JSON.parse(raw);
-    if (typeof parsed !== "object" || parsed === null || typeof parsed.entry !== "string" || typeof parsed.atMs !== "number" || parsed.atMs < runEpochMs(planPath)) {
-      return null;
+__name(writeBudgetStop, "writeBudgetStop");
+function readBudgetStop(planPath) {
+  try {
+    const raw = readFileSync8(
+      join9(promptRecordDir(planPath), STOP_FILE),
+      "utf8"
+    );
+    const parsed = JSON.parse(raw);
+    if (typeof parsed !== "object" || parsed === null || typeof parsed.entry !== "string" || typeof parsed.atMs !== "number" || parsed.atMs < runEpochMs(planPath)) {
+      return null;
+    }
+    return parsed;
+  } catch {
+    return null;
+  }
+}
+__name(readBudgetStop, "readBudgetStop");
+function reverseAuditBudgetMessage(spent, round) {
+  const minutesLeft = Math.max(0, Math.floor(spent.remainingSeconds / 60));
+  const reserveMinutes = Math.round(spent.reserveSeconds / 60);
+  const roundMinutes = Math.round(spent.expectedRoundSeconds / 60);
+  const which = round !== void 0 ? `round ${round}` : "the next round";
+  return `BUDGET: ${minutesLeft} minute(s) remain before this review's deadline \u2014 not enough for the ~${roundMinutes}-minute round being asked for plus the ${reserveMinutes}-minute reserve kept for its verification, compose-review and submission \u2014 so no further reverse-audit round will be built. This is the loop's termination rule, not an error: do not rebuild ${which} and do not relaunch auditors. A budget-stop marker has been recorded and compose-review will disclose it and cap the verdict itself; also add exactly this entry to unreviewedDimensions so the terminal report says it too \u2014 \`${budgetStopEntry(round)}\` \u2014 and proceed to Step 6 with the findings already confirmed. Spend what time remains only on verifying findings already in hand, composing, and submitting. A review that stops here still reports everything it proved; a review that runs past its deadline is killed holding all of it.`;
+}
+__name(reverseAuditBudgetMessage, "reverseAuditBudgetMessage");
+
+// packages/cli/src/commands/review/lib/budget.ts
+init_esbuild_shims();
+var SWEEP_FLOOR = 25;
+var SPECIALIST_FLOOR = 80;
+var LINES_PER_ANGLE = 60;
+var MIN_INLINE_ANGLES = 3;
+var MAX_INLINE_ANGLES = 6;
+var VERIFY_SHARD = 8;
+var MIN_AGENT_TOOL_BUDGET = 30;
+var MAX_AGENT_TOOL_BUDGET = 60;
+var LINES_PER_TOOL_CALL = 20;
+function reviewBudget(input) {
+  const src = sane(input.srcDiffLines);
+  const total = sane(input.diffLines);
+  const effective = Math.max(src, Math.floor(total / 8));
+  const extraAngles = Math.floor(effective / LINES_PER_ANGLE);
+  const inlineAngles = clamp(
+    MIN_INLINE_ANGLES + extraAngles,
+    MIN_INLINE_ANGLES,
+    MAX_INLINE_ANGLES
+  );
+  return {
+    inlineAngles,
+    sweep: effective >= SWEEP_FLOOR,
+    specialistCap: src >= SPECIALIST_FLOOR ? 2 : 0,
+    verifyShard: VERIFY_SHARD,
+    agentToolBudget: clamp(
+      MIN_AGENT_TOOL_BUDGET + Math.floor(effective / LINES_PER_TOOL_CALL),
+      MIN_AGENT_TOOL_BUDGET,
+      MAX_AGENT_TOOL_BUDGET
+    )
+  };
+}
+__name(reviewBudget, "reviewBudget");
+var MAX_TOTAL_TOOL_CALLS = 200;
+function launchToolBudget(planBudget, territoryLines, mandatoryReads) {
+  const base = clamp(
+    sane(planBudget) || MIN_AGENT_TOOL_BUDGET,
+    MIN_AGENT_TOOL_BUDGET,
+    MAX_AGENT_TOOL_BUDGET
+  );
+  const allowance = territoryLines === null ? base : Math.min(
+    base,
+    clamp(
+      MIN_AGENT_TOOL_BUDGET + Math.floor(sane(territoryLines) / LINES_PER_TOOL_CALL),
+      MIN_AGENT_TOOL_BUDGET,
+      MAX_AGENT_TOOL_BUDGET
+    )
+  );
+  return Math.min(
+    MAX_TOTAL_TOOL_CALLS,
+    allowance + Math.max(0, Math.floor(sane(mandatoryReads)))
+  );
+}
+__name(launchToolBudget, "launchToolBudget");
+var BUDGET_GAP_LINE_RE = /^[ \t]*(?:[-*+]|\d+[.)])?[ \t]*(`?)[*_~]{0,3}(?:budget gap|预算(?:缺口|不足|用尽))[*_~]{0,3}[ \t]*[:：][*_~]{0,3}[ \t]*(.+?)[ \t]*$/i;
+var GAP_HINT_RE = /budget gap|预算(?:缺口|不足|用尽)/i;
+var INLINE_BUDGET_GAP_RE = /(?:budget gap|预算(?:缺口|不足|用尽))[*_~`]{0,3}[ \t]*[:：]/i;
+var PLACEHOLDER_GAP_RE = /^(?:<[^>]*>|none\b.*|n\/a\b.*|nothing\b.*|no (?:gaps?|checks?)\b.*|[-—*_~`]+)$/i;
+var MAX_GAP_LENGTH = 160;
+var MAX_GAPS_PER_AGENT = 8;
+var DANGEROUS_CHARS_RE = (
+  // eslint-disable-next-line no-control-regex
+  /[\u0000-\u001f\u007f-\u009f\u2028\u2029\u202a-\u202e]/g
+);
+var WRAPPER_PAIRS = [
+  ["**", "**"],
+  ["__", "__"],
+  ["*", "*"],
+  ["_", "_"],
+  ["~", "~"],
+  ["`", "`"]
+];
+function stripWrappers(s) {
+  let out = s;
+  let changed = true;
+  while (changed) {
+    changed = false;
+    for (const [open, close] of WRAPPER_PAIRS) {
+      if (out.length > open.length + close.length && out.startsWith(open) && out.endsWith(close)) {
+        out = out.slice(open.length, out.length - close.length).trim();
+        changed = true;
+      }
+    }
+  }
+  return out;
+}
+__name(stripWrappers, "stripWrappers");
+function truncateGap(s) {
+  const points = [...s];
+  return points.length > MAX_GAP_LENGTH ? `${points.slice(0, MAX_GAP_LENGTH).join("")}\u2026` : s;
+}
+__name(truncateGap, "truncateGap");
+function budgetGapDisclosures(finalText) {
+  if (!GAP_HINT_RE.test(finalText)) return [];
+  const gaps = [];
+  const seen = /* @__PURE__ */ new Set();
+  let inFence = false;
+  for (const line of finalText.split(/\r?\n/)) {
+    if (/^[ \t]*(?:```|~~~)/.test(line)) {
+      inFence = !inFence;
+      continue;
     }
-    return parsed;
-  } catch {
-    return null;
+    if (inFence) continue;
+    if (/^[ \t]*>/.test(line)) continue;
+    const m = BUDGET_GAP_LINE_RE.exec(line.replace(DANGEROUS_CHARS_RE, " "));
+    if (!m) continue;
+    let raw = m[2] ?? "";
+    if (m[1] === "`") {
+      if (!raw.endsWith("`")) continue;
+      raw = raw.slice(0, -1);
+    }
+    raw = stripWrappers(raw.trim()).trim();
+    const normalized = raw.replace(/[.!…,;:\s]+$/, "").trim();
+    if (normalized.length === 0 || PLACEHOLDER_GAP_RE.test(normalized)) {
+      continue;
+    }
+    const key = normalized.toLowerCase();
+    if (seen.has(key)) continue;
+    seen.add(key);
+    gaps.push(truncateGap(raw));
+    if (gaps.length >= MAX_GAPS_PER_AGENT) break;
   }
+  return gaps;
 }
-__name(readBudgetStop, "readBudgetStop");
-function reverseAuditBudgetMessage(spent, round) {
-  const minutesLeft = Math.max(0, Math.floor(spent.remainingSeconds / 60));
-  const reserveMinutes = Math.round(spent.reserveSeconds / 60);
-  const roundMinutes = Math.round(spent.expectedRoundSeconds / 60);
-  const which = round !== void 0 ? `round ${round}` : "the next round";
-  return `BUDGET: ${minutesLeft} minute(s) remain before this review's deadline \u2014 not enough for the ~${roundMinutes}-minute round being asked for plus the ${reserveMinutes}-minute reserve kept for its verification, compose-review and submission \u2014 so no further reverse-audit round will be built. This is the loop's termination rule, not an error: do not rebuild ${which} and do not relaunch auditors. A budget-stop marker has been recorded and compose-review will disclose it and cap the verdict itself; also add exactly this entry to unreviewedDimensions so the terminal report says it too \u2014 \`${budgetStopEntry(round)}\` \u2014 and proceed to Step 6 with the findings already confirmed. Spend what time remains only on verifying findings already in hand, composing, and submitting. A review that stops here still reports everything it proved; a review that runs past its deadline is killed holding all of it.`;
+__name(budgetGapDisclosures, "budgetGapDisclosures");
+function stripBudgetGapLines(finalText) {
+  if (!GAP_HINT_RE.test(finalText)) return finalText;
+  const kept = [];
+  let inFence = false;
+  for (const line of finalText.split(/\r?\n/)) {
+    const fence = /^[ \t]*(?:```|~~~)/.test(line);
+    if (fence) inFence = !inFence;
+    if (!fence && !inFence && !/^[ \t]*>/.test(line) && BUDGET_GAP_LINE_RE.test(line)) {
+      continue;
+    }
+    kept.push(line);
+  }
+  return kept.join("\n");
 }
-__name(reverseAuditBudgetMessage, "reverseAuditBudgetMessage");
+__name(stripBudgetGapLines, "stripBudgetGapLines");
+function sane(n) {
+  const v = Number(n);
+  return Number.isFinite(v) && v > 0 ? Math.floor(v) : 0;
+}
+__name(sane, "sane");
+function clamp(v, lo, hi) {
+  return Math.min(hi, Math.max(lo, v));
+}
+__name(clamp, "clamp");
 
 // packages/cli/src/commands/review/lib/shell-quote.ts
 init_esbuild_shims();
@@ -7001,6 +7532,37 @@ function coverageFromTranscripts(planPath, env = process.env) {
     return false;
   }, "keySatisfied");
   const superseded = /* @__PURE__ */ __name((rec, chunk2) => chunk2 !== null ? chunkSatisfied(chunk2, rec) : keySatisfied(rec), "superseded");
+  const gapsMemo = /* @__PURE__ */ new Map();
+  const gapsOf = /* @__PURE__ */ __name((rec) => {
+    let g = gapsMemo.get(rec);
+    if (g === void 0) {
+      g = budgetGapDisclosures(rec.finalText);
+      gapsMemo.set(rec, g);
+    }
+    return g;
+  }, "gapsOf");
+  const gapsSuperseded = /* @__PURE__ */ __name((rec, chunk2) => {
+    if (chunk2 !== null) {
+      const b = builtOf(`chunk-${chunk2}`);
+      if (b === void 0) return false;
+      return records.some(
+        (r) => r !== rec && assignedChunk(r) === chunk2 && wasDeliveredVerbatim(r.launchPrompt, b) && r.diffToolCalls > 0 && gapsOf(r).length === 0
+      );
+    }
+    for (const key of built.keys()) {
+      const b = builtOf(key);
+      if (b === void 0) continue;
+      if (!wasDeliveredVerbatim(rec.launchPrompt, b)) continue;
+      const needle = JSON.stringify(briefPath(planPath, key));
+      if (records.some(
+        (r) => r !== rec && wasDeliveredVerbatim(r.launchPrompt, b) && r.successfulCallArgs.some((a) => a.includes(needle)) && gapsOf(r).length === 0
+      )) {
+        return true;
+      }
+    }
+    return false;
+  }, "gapsSuperseded");
+  const budgetGaps = [];
   for (const rec of records) {
     const chunk2 = assignedChunk(rec);
     const name = label(rec, chunk2);
@@ -7058,6 +7620,10 @@ function coverageFromTranscripts(planPath, env = process.env) {
       }
       continue;
     }
+    const gaps = gapsOf(rec);
+    if (gaps.length > 0 && !gapsSuperseded(rec, chunk2)) {
+      budgetGaps.push({ agent: name, gaps });
+    }
     const ranges = merge([...told, ...rec.diffReads]);
     if (ranges.length === 0) continue;
     const u = UNCOVERABLE_RE.exec(rec.finalText);
@@ -7215,6 +7781,7 @@ function coverageFromTranscripts(planPath, env = process.env) {
     unreadBriefs,
     missingChunks,
     uncoverableChunks: [...uncoverable].sort((a, b) => a - b),
+    budgetGaps,
     coveredChunks: [...covered].sort((a, b) => a - b),
     plannedChunks: plan.chunks.map((c) => ({
       id: c.id,
@@ -7351,223 +7918,89 @@ function verificationGaps(planPath, opts, env = process.env) {
     if (gotTheBuiltPrompt.length > 0) return "brief-unread";
     if (records.some(opened)) return "rewritten";
     return "not-launched";
-  }, "deliveryOf");
-  const bestDelivery = /* @__PURE__ */ __name((keys) => {
-    if (keys.length === 0) return "not-built";
-    const rank = {
-      ok: 0,
-      "findings-unread": 1,
-      "brief-unread": 2,
-      rewritten: 3,
-      "not-launched": 4,
-      "not-built": 5
-    };
-    return keys.map(deliveryOf).sort((a, b) => rank[a] - rank[b])[0];
-  }, "bestDelivery");
-  const reverseKeys = [...built.keys()].filter(
-    (k) => k === "reverse-audit" || k.startsWith("reverse-audit--")
-  );
-  const reverse = bestDelivery(reverseKeys);
-  const budgetStopped = readBudgetStop(planPath) !== null;
-  const reverseByDesign = budgetStopped && reverse === "not-built";
-  const reverseGap = !balancedMedium && !reverseByDesign && reverse !== "ok";
-  if (reverseGap) {
-    remediation.push(
-      `reverse audit: ${REVERSE_AUDIT_GAP[reverse].fix.replace(
-        "--plan <plan>",
-        () => `--plan ${shellQuotePath(planPath)}`
-      )}`
-    );
-  }
-  let unverifiedFindings = false;
-  let verify = null;
-  if (opts.postsFindings) {
-    const verifyKeys = [...built.keys()].filter(
-      (k) => k === "verify" || k.startsWith("verify--")
-    );
-    verify = bestDelivery(verifyKeys);
-    if (verify !== "ok") {
-      unverifiedFindings = true;
-      remediation.push(
-        `verification: ${VERIFY_GAP[verify].fix.replace(
-          "--plan <plan>",
-          // A function replacer: a plain string gives `$&`/`$\`` special
-          // meaning, and a path is not a place for replacement patterns.
-          () => `--plan ${shellQuotePath(planPath)}`
-        )}`
-      );
-    }
-  }
-  if (reverseGap && verify !== null && verify === reverse) {
-    gaps.push({
-      subject: "verification and reverse audit",
-      reason: COMBINED_STEP45_GAP[reverse].en,
-      subjectZh: "\u9A8C\u8BC1\u4E0E\u53CD\u5411\u5BA1\u8BA1",
-      reasonZh: COMBINED_STEP45_GAP[reverse].zh
-    });
-  } else {
-    if (reverseGap) {
-      gaps.push({
-        subject: "reverse audit",
-        reason: REVERSE_AUDIT_GAP[reverse].gap,
-        subjectZh: "\u53CD\u5411\u5BA1\u8BA1",
-        reasonZh: REVERSE_AUDIT_GAP[reverse].gapZh
-      });
-    }
-    if (verify !== null && verify !== "ok") {
-      gaps.push({
-        subject: "verification",
-        reason: VERIFY_GAP[verify].gap,
-        subjectZh: "\u9A8C\u8BC1",
-        reasonZh: VERIFY_GAP[verify].gapZh
-      });
-    }
-  }
-  if (balancedMedium) {
-    gaps.push({
-      subject: "reverse audit",
-      reason: "not run \u2014 the balanced (medium) tier skips the second-look pass, so this verdict is capped at Comment rather than Approve",
-      subjectZh: "\u53CD\u5411\u5BA1\u8BA1",
-      reasonZh: "\u672A\u8FD0\u884C\u2014\u2014\u5747\u8861\uFF08medium\uFF09\u6863\u8DF3\u8FC7\u4E8C\u6B21\u5BA1\u67E5\u6B65\u9AA4\uFF0C\u56E0\u6B64\u672C\u6B21\u5224\u5B9A\u4E0A\u9650\u4E3A Comment\uFF0C\u4E0D\u4F1A Approve"
-    });
-  }
-  return { ok: gaps.length === 0, gaps, remediation, unverifiedFindings };
-}
-__name(verificationGaps, "verificationGaps");
-
-// packages/cli/src/commands/review/lib/gh.ts
-init_esbuild_shims();
-import { execFileSync as execFileSync2 } from "node:child_process";
-var MAX_RETRIES = 2;
-var BASE_DELAY_MS = 3e3;
-function sleepSync(ms) {
-  Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms);
-}
-__name(sleepSync, "sleepSync");
-var TRANSIENT_RE = /HTTP 5\d{2}|server is currently unavailable|service unavailable|bad gateway|internal server error/i;
-function isTransientGhError(err) {
-  const stderr = typeof err.stderr === "string" ? err.stderr : "";
-  const msg = err instanceof Error ? err.message : "";
-  return TRANSIENT_RE.test(stderr) || TRANSIENT_RE.test(msg);
-}
-__name(isTransientGhError, "isTransientGhError");
-function execGhWithRetry(args, options) {
-  const execOptions = {
-    encoding: "utf8",
-    maxBuffer: 64 * 1024 * 1024,
-    env: ghEnv(),
-    ...options.input !== void 0 ? { input: options.input } : {}
-  };
-  for (let attempt = 0; ; attempt++) {
-    try {
-      return execFileSync2("gh", args, execOptions).replace(/\r\n/g, "\n").trim();
-    } catch (err) {
-      if (attempt < MAX_RETRIES && isTransientGhError(err)) {
-        const delay = BASE_DELAY_MS * (attempt + 1);
-        process.stderr.write(
-          `gh transient error (attempt ${attempt + 1}/${MAX_RETRIES}), retrying in ${delay}ms\u2026
-`
-        );
-        sleepSync(delay);
-        continue;
-      }
-      throw err;
-    }
-  }
-}
-__name(execGhWithRetry, "execGhWithRetry");
-var ghHost;
-var HOSTNAME_RE = /^[A-Za-z0-9.-]+(?::\d+)?$/;
-function setGhHost(host) {
-  if (host === void 0 || host === "") {
-    ghHost = void 0;
-    return;
-  }
-  if (!HOSTNAME_RE.test(host)) {
-    throw new TypeError(
-      `--host must be a hostname (optionally :port), got ${JSON.stringify(host)}`
-    );
-  }
-  ghHost = host;
-}
-__name(setGhHost, "setGhHost");
-function getGhHost() {
-  return ghHost;
-}
-__name(getGhHost, "getGhHost");
-function ghEnv() {
-  return ghHost ? { ...process.env, GH_HOST: ghHost } : void 0;
-}
-__name(ghEnv, "ghEnv");
-function gh(...args) {
-  return execGhWithRetry(args, {});
-}
-__name(gh, "gh");
-function ghWithInputRetried(input, ...args) {
-  return execGhWithRetry(args, { input });
-}
-__name(ghWithInputRetried, "ghWithInputRetried");
-function ghWithInput(input, ...args) {
-  return execFileSync2("gh", args, {
-    encoding: "utf8",
-    maxBuffer: 64 * 1024 * 1024,
-    env: ghEnv(),
-    input
-  }).replace(/\r\n/g, "\n").trim();
-}
-__name(ghWithInput, "ghWithInput");
-function ghApiAll(path3) {
-  const out = gh("api", "--paginate", path3);
-  if (!out) return [];
-  const parsed = JSON.parse(out);
-  return Array.isArray(parsed) ? parsed : [];
-}
-__name(ghApiAll, "ghApiAll");
-function ghApiAllNested(path3, key) {
-  return parseNdjson(gh("api", "--paginate", path3, "--jq", `.${key}[]`), {
-    strict: true
-  });
-}
-__name(ghApiAllNested, "ghApiAllNested");
-function parseNdjson(out, opts = {}) {
-  const strict = opts.strict ?? true;
-  if (!out) return [];
-  const values = [];
-  for (const line of out.split("\n")) {
-    if (line.trim().length === 0) continue;
-    if (strict) {
-      values.push(JSON.parse(line));
-      continue;
-    }
-    try {
-      values.push(JSON.parse(line));
-    } catch {
-    }
+  }, "deliveryOf");
+  const bestDelivery = /* @__PURE__ */ __name((keys) => {
+    if (keys.length === 0) return "not-built";
+    const rank = {
+      ok: 0,
+      "findings-unread": 1,
+      "brief-unread": 2,
+      rewritten: 3,
+      "not-launched": 4,
+      "not-built": 5
+    };
+    return keys.map(deliveryOf).sort((a, b) => rank[a] - rank[b])[0];
+  }, "bestDelivery");
+  const reverseKeys = [...built.keys()].filter(
+    (k) => k === "reverse-audit" || k.startsWith("reverse-audit--")
+  );
+  const reverse = bestDelivery(reverseKeys);
+  const budgetStopped = readBudgetStop(planPath) !== null;
+  const reverseByDesign = budgetStopped && reverse === "not-built";
+  const reverseGap = !balancedMedium && !reverseByDesign && reverse !== "ok";
+  if (reverseGap) {
+    remediation.push(
+      `reverse audit: ${REVERSE_AUDIT_GAP[reverse].fix.replace(
+        "--plan <plan>",
+        () => `--plan ${shellQuotePath(planPath)}`
+      )}`
+    );
   }
-  return values;
-}
-__name(parseNdjson, "parseNdjson");
-function currentUser() {
-  return gh("api", "user", "--jq", ".login");
-}
-__name(currentUser, "currentUser");
-function ensureAuthenticated() {
-  for (let attempt = 0; ; attempt++) {
-    try {
-      execFileSync2("gh", ["auth", "status"], { stdio: "pipe", env: ghEnv() });
-      return;
-    } catch (err) {
-      if (attempt === 0 && err.code !== "ENOENT") {
-        sleepSync(2e3);
-        continue;
-      }
-      throw new Error(
-        "gh CLI is not authenticated. Run `gh auth login` and retry."
+  let unverifiedFindings = false;
+  let verify = null;
+  if (opts.postsFindings) {
+    const verifyKeys = [...built.keys()].filter(
+      (k) => k === "verify" || k.startsWith("verify--")
+    );
+    verify = bestDelivery(verifyKeys);
+    if (verify !== "ok") {
+      unverifiedFindings = true;
+      remediation.push(
+        `verification: ${VERIFY_GAP[verify].fix.replace(
+          "--plan <plan>",
+          // A function replacer: a plain string gives `$&`/`$\`` special
+          // meaning, and a path is not a place for replacement patterns.
+          () => `--plan ${shellQuotePath(planPath)}`
+        )}`
       );
     }
   }
+  if (reverseGap && verify !== null && verify === reverse) {
+    gaps.push({
+      subject: "verification and reverse audit",
+      reason: COMBINED_STEP45_GAP[reverse].en,
+      subjectZh: "\u9A8C\u8BC1\u4E0E\u53CD\u5411\u5BA1\u8BA1",
+      reasonZh: COMBINED_STEP45_GAP[reverse].zh
+    });
+  } else {
+    if (reverseGap) {
+      gaps.push({
+        subject: "reverse audit",
+        reason: REVERSE_AUDIT_GAP[reverse].gap,
+        subjectZh: "\u53CD\u5411\u5BA1\u8BA1",
+        reasonZh: REVERSE_AUDIT_GAP[reverse].gapZh
+      });
+    }
+    if (verify !== null && verify !== "ok") {
+      gaps.push({
+        subject: "verification",
+        reason: VERIFY_GAP[verify].gap,
+        subjectZh: "\u9A8C\u8BC1",
+        reasonZh: VERIFY_GAP[verify].gapZh
+      });
+    }
+  }
+  if (balancedMedium) {
+    gaps.push({
+      subject: "reverse audit",
+      reason: "not run \u2014 the balanced (medium) tier skips the second-look pass, so this verdict is capped at Comment rather than Approve",
+      subjectZh: "\u53CD\u5411\u5BA1\u8BA1",
+      reasonZh: "\u672A\u8FD0\u884C\u2014\u2014\u5747\u8861\uFF08medium\uFF09\u6863\u8DF3\u8FC7\u4E8C\u6B21\u5BA1\u67E5\u6B65\u9AA4\uFF0C\u56E0\u6B64\u672C\u6B21\u5224\u5B9A\u4E0A\u9650\u4E3A Comment\uFF0C\u4E0D\u4F1A Approve"
+    });
+  }
+  return { ok: gaps.length === 0, gaps, remediation, unverifiedFindings };
 }
-__name(ensureAuthenticated, "ensureAuthenticated");
+__name(verificationGaps, "verificationGaps");
 
 // packages/cli/src/commands/review/lib/ledger.ts
 init_esbuild_shims();
@@ -7812,6 +8245,8 @@ function composeReviewBody(input, cliVersion) {
     }
   }
   const remediation = [];
+  const budgetGapNotes = [];
+  const MAX_BUDGET_GAP_LINES = 5;
   const planRef = input.planPath ? shellQuotePath(input.planPath) : "<plan>";
   const missingReceipts = [];
   let plannedChunks = [];
@@ -7890,6 +8325,7 @@ function composeReviewBody(input, cliVersion) {
           "agents that never opened the diff: relaunch each with the same printed prompt \u2014 the prompt already names the diff and its ranges; the read is what proves the review happened"
         );
       }
+      budgetGapNotes.push(...cov.budgetGaps);
       coverageEntries.push(...cov.disclosures);
       if (cov.rewrittenPrompts.length > 0) {
         remediation.push(
@@ -8127,6 +8563,23 @@ ${footer}`;
       zh: `\u672A\u5BA1\u67E5\uFF1A${d}\u3002`
     });
   }
+  const budgetGapItems = [];
+  for (const g of budgetGapNotes) {
+    for (const gap of g.gaps) budgetGapItems.push({ agent: g.agent, gap });
+  }
+  const keptBudgetGaps = budgetGapItems.filter(
+    (it) => !unreviewed.some((d) => d.includes(it.gap))
+  );
+  if (keptBudgetGaps.length > 0) {
+    const shown = keptBudgetGaps.slice(0, MAX_BUDGET_GAP_LINES);
+    const more = keptBudgetGaps.length - shown.length;
+    const enList = shown.map((it) => `${it.agent}: ${mdField(it.gap)}`).join("; ") + (more > 0 ? `, and ${more} more` : "");
+    const zhList = shown.map((it) => `${it.agent}\uFF1A${mdField(it.gap)}`).join("\uFF1B") + (more > 0 ? `\uFF0C\u53E6\u6709 ${more} \u6761` : "");
+    notReviewedParts.push({
+      en: `Not explored to full depth (tool budget reached): ${enList}.`,
+      zh: `\u672A\u63A2\u7D22\u5230\u5168\u90E8\u6DF1\u5EA6\uFF08\u8FBE\u5230\u5DE5\u5177\u8C03\u7528\u9884\u7B97\uFF09\uFF1A${zhList}\u3002`
+    });
+  }
   const seenSubjects = /* @__PURE__ */ new Set();
   const byReason = /* @__PURE__ */ new Map();
   const reasonZhOf = /* @__PURE__ */ new Map();
@@ -8234,11 +8687,12 @@ ${footer}`;
       body: render(
         [
           { en: "No issues found. LGTM! \u2705", zh: "\u672A\u53D1\u73B0\u95EE\u9898\u3002LGTM\uFF01\u2705" },
+          ...notReviewedParts,
           ...deferredBlock,
           ...testPlanBlock,
           ...repositoryContextBlock2
         ],
-        deferredBlock.length || testPlanBlock.length || repositoryContextBlock2.length ? "\n\n" : " "
+        notReviewedParts.length || deferredBlock.length || testPlanBlock.length || repositoryContextBlock2.length ? "\n\n" : " "
       ),
       baseEvent,
       cappedBy,
@@ -8264,7 +8718,12 @@ ${footer}`;
     // body could open "Reviewed — no blockers." two lines above "nobody read
     // them." Nothing nobody read can be certified blocker-free — and neither
     // can a loop that ended with findings no verifier ever ruled on.
-    missingReceipts.length === 0 && !findingsUnverifiedAtCompose;
+    missingReceipts.length === 0 && // A disclosed budget gap is not a blocker, but "Reviewed — no
+    // blockers." two lines above "Not explored to full depth" is the
+    // opener certifying what the disclosure takes back — the exact
+    // shape the comment below forbids. (A gap the caller promoted into
+    // `unreviewedDimensions` already denies certification above.)
+    keptBudgetGaps.length === 0 && !findingsUnverifiedAtCompose;
     const disclosedChunkIds = /* @__PURE__ */ new Set();
     for (const e of coverageEntries) {
       const m = /^chunk (\d+)$/.exec(e.subject);
@@ -8696,7 +9155,7 @@ __name(verdictLine, "verdictLine");
 
 // packages/cli/src/commands/review/findings.ts
 init_esbuild_shims();
-import { existsSync as existsSync4, readFileSync as readFileSync11, writeFileSync as writeFileSync7, mkdirSync as mkdirSync7 } from "node:fs";
+import { existsSync as existsSync5, readFileSync as readFileSync11, writeFileSync as writeFileSync7, mkdirSync as mkdirSync7 } from "node:fs";
 import { dirname as dirname6, resolve as resolve6 } from "node:path";
 var SEVERITIES = ["Critical", "Suggestion", "Nice to have"];
 var CONFIDENCES = ["high", "low"];
@@ -9119,7 +9578,7 @@ var findingsCommand = {
     let readjudicated = [];
     if (testDelta !== void 0) {
       let measurement;
-      if (existsSync4(resolve6(testDelta))) {
+      if (existsSync5(resolve6(testDelta))) {
         try {
           measurement = readJson(testDelta, "test-delta");
         } catch (err) {
@@ -9176,88 +9635,6 @@ import { execFileSync as execFileSync4 } from "node:child_process";
 import { mkdirSync as mkdirSync8, readFileSync as readFileSync13, writeFileSync as writeFileSync8 } from "node:fs";
 import { dirname as dirname7, resolve as resolve7 } from "node:path";
 
-// packages/cli/src/commands/review/lib/git.ts
-init_esbuild_shims();
-import { execFileSync as execFileSync3 } from "node:child_process";
-import { existsSync as existsSync5, rmSync as rmSync3 } from "node:fs";
-var GIT_TIMEOUT_MS2 = 12e4;
-function gitOpts() {
-  return {
-    timeout: GIT_TIMEOUT_MS2,
-    env: { ...process.env, GIT_TERMINAL_PROMPT: "0" }
-  };
-}
-__name(gitOpts, "gitOpts");
-function git(...args) {
-  return execFileSync3("git", args, { ...gitOpts(), encoding: "utf8" }).replace(/\r\n/g, "\n").trim();
-}
-__name(git, "git");
-function gitWithInput(input, args) {
-  return execFileSync3("git", args, { ...gitOpts(), encoding: "utf8", input }).replace(/\r\n/g, "\n").trim();
-}
-__name(gitWithInput, "gitWithInput");
-function gitOpt(...args) {
-  try {
-    return execFileSync3("git", args, {
-      ...gitOpts(),
-      encoding: "utf8",
-      stdio: ["ignore", "pipe", "pipe"]
-    }).replace(/\r\n/g, "\n").trim();
-  } catch {
-    return null;
-  }
-}
-__name(gitOpt, "gitOpt");
-function refExists(ref) {
-  return gitOpt("rev-parse", "--verify", "--quiet", ref) !== null;
-}
-__name(refExists, "refExists");
-function worktreeReleaseResult(existed, stillThere, removeError) {
-  const freed = existed && !stillThere;
-  if (!existed || freed) {
-    return { existed, freed, reason: void 0 };
-  }
-  return {
-    existed,
-    freed,
-    reason: removeError ? removeError instanceof Error ? removeError.message : String(removeError) : "the path is still there after `git worktree remove --force` and `rm -rf`"
-  };
-}
-__name(worktreeReleaseResult, "worktreeReleaseResult");
-function releaseWorktree(worktreePath2) {
-  const existed = existsSync5(worktreePath2);
-  let removeError;
-  if (existed) {
-    gitOpt("worktree", "remove", worktreePath2, "--force");
-    try {
-      rmSync3(worktreePath2, { recursive: true, force: true });
-    } catch (e) {
-      removeError = e;
-    }
-  }
-  gitOpt("worktree", "prune");
-  return worktreeReleaseResult(existed, existsSync5(worktreePath2), removeError);
-}
-__name(releaseWorktree, "releaseWorktree");
-function gitRaw(...args) {
-  return execFileSync3("git", args, {
-    ...gitOpts(),
-    maxBuffer: 512 * 1024 * 1024,
-    stdio: ["ignore", "pipe", "pipe"]
-  });
-}
-__name(gitRaw, "gitRaw");
-function gitRawTolerateDiff(...args) {
-  try {
-    return gitRaw(...args);
-  } catch (err) {
-    const e = err;
-    if (e.status === 1 && e.stdout && e.stdout.length > 0) return e.stdout;
-    throw err;
-  }
-}
-__name(gitRawTolerateDiff, "gitRawTolerateDiff");
-
 // packages/cli/src/commands/review/lib/diff-flags.ts
 init_esbuild_shims();
 var PINNED_DIFF_CONFIG = [
@@ -9323,42 +9700,6 @@ function classifyHeavy(input) {
 }
 __name(classifyHeavy, "classifyHeavy");
 
-// packages/cli/src/commands/review/lib/budget.ts
-init_esbuild_shims();
-var SWEEP_FLOOR = 25;
-var SPECIALIST_FLOOR = 80;
-var LINES_PER_ANGLE = 60;
-var MIN_INLINE_ANGLES = 3;
-var MAX_INLINE_ANGLES = 6;
-var VERIFY_SHARD = 8;
-function reviewBudget(input) {
-  const src = sane(input.srcDiffLines);
-  const total = sane(input.diffLines);
-  const effective = Math.max(src, Math.floor(total / 8));
-  const extraAngles = Math.floor(effective / LINES_PER_ANGLE);
-  const inlineAngles = clamp(
-    MIN_INLINE_ANGLES + extraAngles,
-    MIN_INLINE_ANGLES,
-    MAX_INLINE_ANGLES
-  );
-  return {
-    inlineAngles,
-    sweep: effective >= SWEEP_FLOOR,
-    specialistCap: src >= SPECIALIST_FLOOR ? 2 : 0,
-    verifyShard: VERIFY_SHARD
-  };
-}
-__name(reviewBudget, "reviewBudget");
-function sane(n) {
-  const v = Number(n);
-  return Number.isFinite(v) && v > 0 ? Math.floor(v) : 0;
-}
-__name(sane, "sane");
-function clamp(v, lo, hi) {
-  return Math.min(hi, Math.max(lo, v));
-}
-__name(clamp, "clamp");
-
 // packages/cli/src/commands/review/lib/report.ts
 function buildPlanReport(plan, postImageLines) {
   const files = plan.files.map((f) => {
@@ -12580,7 +12921,7 @@ function runPublishAssets(args) {
     return;
   }
   const repo = repoResult.repo;
-  const effectiveHost = args.host ?? (process.env["GH_HOST"]?.trim() || void 0);
+  const effectiveHost = resolveGhHost(args.host);
   const auth = reviewWriteAuthorization({
     userAuthorized: args.userAuthorized,
     skillArgs: args.skillArgs,
@@ -13182,7 +13523,7 @@ This is an environment problem, not a finding about the agents. Coverage cannot
   }
   if (report.missingChunks.length > 0) {
     writeStderrLine(
-      `NOTE: a chunk counts as read when an agent was pointed at its lines AND the harness recorded that agent opening the diff. An agent handed the diff with no line ranges covers nothing. Build every whole-diff agent's prompt with \`"\${QWEN_CODE_CLI:-qwen}" review agent-prompt --plan ${shellQuotePath(args.plan)} --whole-diff\` and paste it verbatim ahead of its brief.`
+      `NOTE: a chunk counts as read when an agent was pointed at its lines AND the harness recorded that agent opening the diff. An agent handed the diff with no line ranges covers nothing. Every rostered agent's launch block \u2014 its diff reads included \u2014 comes from \`"\${QWEN_CODE_CLI:-qwen}" review agent-prompt --plan ${shellQuotePath(args.plan)} --roster\` (or \`--role <r>\` for one, \`--chunk <id>\` for a chunk agent \u2014 the usual reader of a missing chunk, which \`--role\` cannot rebuild); pass each verbatim. \`--whole-diff\` builds the reading block for an Agent 8 specialist alone \u2014 prepending it to a rostered brief double-budgets the agent.`
     );
   }
   if (report.idleAgents.length > 0) {
@@ -13200,6 +13541,12 @@ This is an environment problem, not a finding about the agents. Coverage cannot
       `ERROR: ${report.missingChunks.length} chunk(s) were not reviewed \u2014 ${report.missingChunks.join(", ")}. Nobody read those lines. Do not aggregate findings over a diff that was not read.`
     );
   }
+  if (report.budgetGaps.length > 0) {
+    const total = report.budgetGaps.reduce((n, g) => n + g.gaps.length, 0);
+    writeStderrLine(
+      `NOTE: ${total} budget-gap disclosure(s) from ${report.budgetGaps.length} agent(s). Do not relaunch over these; rule on each: a gap naming an incomplete required trace goes in unreviewedDimensions, optional depth is disclosed in the report's "Not reviewed" section. The disclosures \u2014 ` + report.budgetGaps.map((g) => `${g.agent}: ${g.gaps.join("; ")}`).join(" | ")
+    );
+  }
   if (!report.ok) {
     process.exitCode = 3;
   }
@@ -13297,8 +13644,12 @@ function classifyReturn(rec, territory, findingsList) {
       return "yielded";
     }
   }
-  const receipt = DRY_RECEIPT_RE.exec(text);
-  if (rec.successfulToolCalls > 0 && rec.diffToolCalls > 0 && openedTheTerritory(rec.diffReads, territory) && receipt !== null && substantiveClause(receipt[1] ?? "")) {
+  const judged = stripBudgetGapLines(text);
+  const receipt = DRY_RECEIPT_RE.exec(judged);
+  const clause = receipt?.[1] ?? "";
+  const inlineGap = INLINE_BUDGET_GAP_RE.exec(clause);
+  const judgedClause = inlineGap === null ? clause : clause.slice(0, inlineGap.index);
+  if (rec.successfulToolCalls > 0 && rec.diffToolCalls > 0 && openedTheTerritory(rec.diffReads, territory) && receipt !== null && substantiveClause(judgedClause)) {
     return "dry";
   }
   return "unknown";
@@ -13598,6 +13949,60 @@ function chunkFrom(report, id) {
   return { diffPath, chunk: chunk2, total: chunks.length };
 }
 __name(chunkFrom, "chunkFrom");
+var FINDINGS_LIST_READS = 3;
+var LINES_PER_FILE_READ = 500;
+function wholeDiffReadPages(report) {
+  return (Array.isArray(report.chunks) ? report.chunks : []).reduce(
+    (n, c) => {
+      const chars = c?.chars;
+      return n + Math.max(
+        1,
+        Math.ceil(
+          (typeof chars === "number" && Number.isFinite(chars) ? chars : 0) / READ_FILE_CHAR_CAP
+        )
+      );
+    },
+    0
+  );
+}
+__name(wholeDiffReadPages, "wholeDiffReadPages");
+function weightedTerritoryLines(report, chunk2) {
+  const lines = typeof chunk2.lines === "number" && Number.isFinite(chunk2.lines) ? Math.max(0, Math.floor(chunk2.lines)) : 0;
+  if (lines === 0) return 0;
+  const kinds = new Map(
+    (Array.isArray(report.files) ? report.files : []).filter((f) => !!f && typeof f.path === "string").map((f) => [f.path, f.kind])
+  );
+  let src = 0;
+  let other = 0;
+  for (const f of Array.isArray(chunk2.files) ? chunk2.files : []) {
+    const e = f;
+    const span = typeof e?.newStart === "number" && typeof e?.newEnd === "number" ? e.newEnd - e.newStart + 1 : 0;
+    if (!(span > 0)) continue;
+    const kind = typeof e.path === "string" ? kinds.get(e.path) : void 0;
+    if (kind === void 0 || kind === "source") src += span;
+    else other += span;
+  }
+  const total = src + other;
+  if (total === 0) return lines;
+  return Math.max(1, Math.round(lines * (src + other / 8) / total));
+}
+__name(weightedTerritoryLines, "weightedTerritoryLines");
+function toolBudgetBlock(report, launch) {
+  const base = report.budget?.agentToolBudget;
+  if (typeof base !== "number" || !Number.isFinite(base) || base <= 0) {
+    return [];
+  }
+  const reads = Number.isFinite(launch.mandatoryReads) ? Math.max(0, Math.floor(launch.mandatoryReads)) : 0;
+  const territory = typeof launch.territoryLines === "number" && Number.isFinite(launch.territoryLines) ? launch.territoryLines : launch.territoryLines === null || launch.territoryLines === void 0 ? null : 0;
+  const total = launchToolBudget(base, territory, reads);
+  return [
+    "",
+    "## Tool budget",
+    "",
+    `About **${total} tool calls** for this whole review \u2014 reads, greps, shell, everything \u2014 and the ~${reads} reads your launch is assigned (your brief, the diff pages, any files your method mandates) are already counted in. It is a soft ceiling. At the ceiling: stop exploring, write your findings from the evidence already in hand, and disclose each unfinished check on its own line, exactly as \`Budget gap: <the check>\` \u2014 the coverage tool reads those lines, so the format is load-bearing. The budget never suppresses a finding: a candidate you can already name goes in your return regardless (at \`Confidence: low\` if the budget stopped you before verifying it).`
+  ];
+}
+__name(toolBudgetBlock, "toolBudgetBlock");
 function buildChunkAgentPrompt(report, id, rules) {
   const { chunk: chunk2, total } = chunkFrom(report, id);
   const files = (Array.isArray(chunk2.files) ? chunk2.files : []).filter(
@@ -13653,6 +14058,21 @@ function buildChunkAgentPrompt(report, id, rules) {
   if (repositoryContext) {
     parts.push("", ...repositoryContextBlock(repositoryContext));
   }
+  if (!unreachable) {
+    parts.push(
+      ...toolBudgetBlock(report, {
+        territoryLines: weightedTerritoryLines(report, chunk2),
+        // The launch's whole reading list: the brief file, plus the diff pages
+        // this chunk takes.
+        mandatoryReads: 1 + Math.max(
+          1,
+          Math.ceil(
+            (Number.isFinite(chunk2.chars) ? chunk2.chars : 0) / READ_FILE_CHAR_CAP
+          )
+        )
+      })
+    );
+  }
   parts.push(
     "",
     "## When you are done",
@@ -13702,6 +14122,9 @@ function buildWholeDiffBlock(report, rules) {
   if (repositoryContext) {
     parts.push("", ...repositoryContextBlock(repositoryContext));
   }
+  parts.push(
+    ...toolBudgetBlock(report, { mandatoryReads: wholeDiffReadPages(report) })
+  );
   parts.push(...tail(rules));
   return parts.join("\n");
 }
@@ -13889,6 +14312,56 @@ function buildRoleBrief(report, role, opts = {}) {
     parts.push("");
   }
   parts.push("## Your dimension", "", brief.brief);
+  if (!brief.budgetExempt) {
+    const chunks = Array.isArray(report.chunks) ? report.chunks : [];
+    if (typeof opts.chunk === "number") {
+      const c = chunks.find((x) => x?.id === opts.chunk);
+      parts.push(
+        ...toolBudgetBlock(report, {
+          territoryLines: weightedTerritoryLines(report, c ?? {}),
+          // Its reading list: the brief file, the chunk's diff pages, and
+          // the cumulative findings list its brief orders read in full —
+          // measured at 65-82 KB on real runs, several pages of it.
+          mandatoryReads: 1 + Math.max(
+            1,
+            Math.ceil(
+              (typeof c?.chars === "number" && Number.isFinite(c.chars) ? c.chars : 0) / READ_FILE_CHAR_CAP
+            )
+          ) + FINDINGS_LIST_READS
+        })
+      );
+    } else if (role.startsWith("invariant-") && opts.file) {
+      const files = Array.isArray(report.files) ? report.files : [];
+      const f = files.find((x) => x?.path === opts.file);
+      const added = typeof f?.addedLines === "number" ? f.addedLines : 0;
+      const fileLines = typeof f?.fileLines === "number" && Number.isFinite(f.fileLines) ? f.fileLines : 0;
+      const changed = added + (typeof f?.removedLines === "number" ? f.removedLines : 0);
+      parts.push(
+        ...toolBudgetBlock(report, {
+          territoryLines: changed,
+          // Its reading list: the brief, its own diff slice, and the whole
+          // post-change file paged to the end. The pages come from
+          // `fileLines` — the post-change length the plan records for
+          // every file — with `addedLines` as the fallback lower bound
+          // for an older plan without it: a file can go heavy by VOLUME
+          // in a large file it barely rewrote, and estimating its paging
+          // from added lines alone told exactly that agent its mandatory
+          // reading was already overspending. Floors at the old flat 4 so
+          // no launch gets less than before.
+          mandatoryReads: Math.max(
+            4,
+            2 + Math.ceil(Math.max(added, fileLines) / LINES_PER_FILE_READ)
+          )
+        })
+      );
+    } else {
+      parts.push(
+        ...toolBudgetBlock(report, {
+          mandatoryReads: 1 + wholeDiffReadPages(report) + (brief.acceptsFindings ? FINDINGS_LIST_READS : 0)
+        })
+      );
+    }
+  }
   const repositoryContext = repositoryContextOf(report);
   if (role === "7") {
     if (repositoryContext) {
@@ -16948,12 +17421,8 @@ function authorization(args) {
     repo: args.repo,
     // The EFFECTIVE host, not merely the flag: with --host absent the gh
     // child inherits an operator-exported GH_HOST, so that is where this
-    // write would route — and what the gate must bind. Same resolution as
-    // publish-assets.
-    // `|| undefined`, not `??`: an exported-but-empty GH_HOST ("" survives
-    // `??`, being non-nullish) must read as "no host", not as a host named
-    // "" that fails every comparison.
-    host: args.host ?? (process.env["GH_HOST"]?.trim() || void 0)
+    // write would route — and what the gate must bind.
+    host: resolveGhHost(args.host)
   });
 }
 __name(authorization, "authorization");
@@ -20241,9 +20710,9 @@ var saveArtifactCommand = {
 var reviewCommand = {
   command: "review",
   describe: "Run a review non-interactively (`run`), plus the internal helpers used by the /review skill (PR worktree setup, context fetch, rules loading, presubmit checks, cleanup)",
-  builder: /* @__PURE__ */ __name((yargs) => yargs.command(runCommand).command(parseArgsCommand).command(fetchPrCommand).command(captureLocalCommand).command(planDiffCommand).command(repoContextCommand).command(prContextCommand).command(commentStatusCommand).command(loadRulesCommand).command(agentPromptCommand).command(buildTestCommand).command(baseTreeCommand).command(testDeltaCommand).command(driveCommand).command(mockProviderCommand).command(extractStepCommand).command(scriptLintCommand).command(resolveAnchorsCommand).command(checkCoverageCommand).command(costLedgerCommand).command(presubmitCommand).command(testEfficacyCommand).command(testPlanCommand).command(findingsCommand).command(publishAssetsCommand).command(composeReviewCommand).command(saveArtifactCommand).command(submitCommand).command(cleanupCommand).demandCommand(
+  builder: /* @__PURE__ */ __name((yargs) => yargs.command(runCommand).command(parseArgsCommand).command(matchRemoteCommand).command(fetchPrCommand).command(captureLocalCommand).command(planDiffCommand).command(repoContextCommand).command(prContextCommand).command(commentStatusCommand).command(loadRulesCommand).command(agentPromptCommand).command(buildTestCommand).command(baseTreeCommand).command(testDeltaCommand).command(driveCommand).command(mockProviderCommand).command(extractStepCommand).command(scriptLintCommand).command(resolveAnchorsCommand).command(checkCoverageCommand).command(costLedgerCommand).command(presubmitCommand).command(testEfficacyCommand).command(testPlanCommand).command(findingsCommand).command(publishAssetsCommand).command(composeReviewCommand).command(saveArtifactCommand).command(submitCommand).command(cleanupCommand).demandCommand(
     1,
-    "Specify a subcommand: run, parse-args, fetch-pr, capture-local, plan-diff, repo-context, pr-context, comment-status, load-rules, agent-prompt, build-test, base-tree, test-delta, drive, mock-provider, extract-step, script-lint, resolve-anchors, check-coverage, cost-ledger, presubmit, test-efficacy, test-plan, findings, publish-assets, compose-review, save-artifact, submit, or cleanup."
+    "Specify a subcommand: run, parse-args, match-remote, fetch-pr, capture-local, plan-diff, repo-context, pr-context, comment-status, load-rules, agent-prompt, build-test, base-tree, test-delta, drive, mock-provider, extract-step, script-lint, resolve-anchors, check-coverage, cost-ledger, presubmit, test-efficacy, test-plan, findings, publish-assets, compose-review, save-artifact, submit, or cleanup."
   ).version(false), "builder"),
   handler: /* @__PURE__ */ __name(() => {
   }, "handler")
@@ -20443,10 +20912,10 @@ var updateCommand3 = {
       stdioHelpers,
       { updateEventEmitter }
     ] = await Promise.all([
-      import("./settings-G75R6FOA.js"),
-      import("./updateCheck-PCUTVRFE.js"),
-      import("./installationInfo-ZTMTMYNW.js"),
-      import("./standalone-update-HLYOLX6V.js"),
+      import("./settings-V7BR3RKP.js"),
+      import("./updateCheck-YZ2CRCFC.js"),
+      import("./installationInfo-VGBXMYLY.js"),
+      import("./standalone-update-QGIKHATD.js"),
       import("./stdioHelpers-7A2EE64Z.js"),
       import("./updateEventEmitter-5MKC7BLQ.js")
     ]);
@@ -21613,7 +22082,7 @@ async function loadCliConfig(settings, argv, cwd = process.cwd(), overrideExtens
     disabledSlashCommands: disabledSlashCommands.length > 0 ? disabledSlashCommands : void 0,
     disabledSkillNamesProvider: bareMode || safeMode ? void 0 : disabledSkillNamesProvider,
     terminalImageRenderSupportProvider: interactive ? async () => {
-      const { getTerminalImageRenderSupport } = await import("./terminal-image-renderer-KF3GKNWW.js");
+      const { getTerminalImageRenderSupport } = await import("./terminal-image-renderer-TLDNACQY.js");
       return getTerminalImageRenderSupport();
     } : void 0,
     disabledSkillLevels: bareMode || safeMode || !Array.isArray(settings.skills?.disabledLevels) ? void 0 : settings.skills.disabledLevels.filter(isSkillLevel),