@qwen-code/qwen-code 0.21.8-nightly.20260810.55e20db328 → 0.21.9

package/chunks/{chunk-V47QNK5W.js → chunk-II6G3EY6.js}

@@ -2,13 +2,13 @@
 "use strict";
 import {
   listCommand
-} from "./chunk-OW2BWT2P.js";
+} from "./chunk-SCAZZ3Q4.js";
 import {
   serveCommand
-} from "./chunk-ZIKTCMQF.js";
+} from "./chunk-LZZLUCRS.js";
 import {
   getErrorMessage as getErrorMessage2
-} from "./chunk-P5ULXPK5.js";
+} from "./chunk-P2FK2HBV.js";
 import {
   OBSERVED_CONTACT_MAX_FRESH_WITHIN_SECONDS,
   ObservedChannelContactStore
@@ -33,7 +33,7 @@ import {
   collectProviderModelsForProtocol,
   getAuthTypeFromEnv,
   resolveCliGenerationConfig
-} from "./chunk-HWXGX534.js";
+} from "./chunk-KTQGGPGV.js";
 import {
   resolveSkillSettings
 } from "./chunk-Z4X5MTRT.js";
@@ -53,14 +53,14 @@ import {
   registerToolCallDispatch,
   selectFirstModel,
   sessionsPath
-} from "./chunk-EISUQQPS.js";
+} from "./chunk-ATMO54WE.js";
 import {
   getExtensionManager,
   requestChoicePluginNonInteractive,
   requestConsentNonInteractive,
   requestConsentOrFail,
   resolveExtensionCommandScope
-} from "./chunk-TWFFY5BP.js";
+} from "./chunk-HADWBW5R.js";
 import {
   parseChannelConfig
 } from "./chunk-LHEC5V6G.js";
@@ -133,33 +133,33 @@ import {
   assembleMcpServers,
   getPendingGatedMcpServers,
   mcpCommand
-} from "./chunk-PNVPFARW.js";
+} from "./chunk-MTCYGTWH.js";
 import {
   loadSettings
-} from "./chunk-HKI3KHAO.js";
+} from "./chunk-JUWS2Z5K.js";
 import {
   detectSystemLanguage,
   getCurrentLanguage,
   initializeI18n,
   resolveLanguageSetting,
   t
-} from "./chunk-BL65MO72.js";
+} from "./chunk-WP5VOXF7.js";
 import {
   loadEnvironment
-} from "./chunk-KP25NJNM.js";
+} from "./chunk-T6HEQR2Q.js";
 import {
   resolveAcpChannelFallback,
   scrubAndReportInheritedLoaderEnv
-} from "./chunk-R4ZA6GBK.js";
+} from "./chunk-VFMASYQA.js";
 import {
   getCliVersion
-} from "./chunk-ZV7LTLFE.js";
+} from "./chunk-IOEZE2YT.js";
 import {
   getPackageJson
 } from "./chunk-VJNBRRZG.js";
 import {
   isWorkspaceTrusted
-} from "./chunk-YR7ZQ4RD.js";
+} from "./chunk-ZOSTTOUJ.js";
 import {
   require_strip_json_comments
 } from "./chunk-NPQ5ZKRP.js";
@@ -201,7 +201,7 @@ import {
   unquoteCStylePath,
   updateChannelMemoryEntry,
   updateSetting
-} from "./chunk-47ZUMGGY.js";
+} from "./chunk-XX7QFP34.js";
 import {
   nextFireTime,
   parseCron
@@ -2731,7 +2731,7 @@ var stopCommand = {
     if (argv["daemon-url"]) {
       const token = argv.token ?? process.env[QWEN_SERVER_TOKEN_ENV] ?? process.env[QWEN_DAEMON_TOKEN_ENV];
       try {
-        const sdk = await import("./daemon-VSX3FHTY.js");
+        const sdk = await import("./daemon-POSQPD3G.js");
         const client = new sdk.DaemonClient({
           baseUrl: argv["daemon-url"],
           ...token ? { token } : {}
@@ -2917,7 +2917,7 @@ var statusCommand = {
     if (argv["daemon-url"]) {
       const token = argv.token ?? process.env[QWEN_SERVER_TOKEN_ENV] ?? process.env[QWEN_DAEMON_TOKEN_ENV];
       try {
-        const sdk = await import("./daemon-VSX3FHTY.js");
+        const sdk = await import("./daemon-POSQPD3G.js");
         const client = new sdk.DaemonClient({
           baseUrl: argv["daemon-url"],
           ...token ? { token } : {}
@@ -3028,7 +3028,7 @@ var reloadCommand = {
     const token = resolveToken(argv.token);
     let sdk;
     try {
-      sdk = await import("./daemon-VSX3FHTY.js");
+      sdk = await import("./daemon-POSQPD3G.js");
     } catch (err) {
       writeStderrLine(
         `[Channel] Failed to load daemon SDK: ${safeChannelCommandErrorMessage(err)}`
@@ -3108,7 +3108,7 @@ var setCommand2 = {
     const selection = names[0] === "all" ? { mode: "all" } : { mode: "names", names };
     let sdk;
     try {
-      sdk = await import("./daemon-VSX3FHTY.js");
+      sdk = await import("./daemon-POSQPD3G.js");
     } catch (error) {
       writeStderrLine(
         `[Channel] Failed to load daemon SDK: ${safeChannelCommandErrorMessage(error)}`
@@ -3234,7 +3234,7 @@ function createDaemonChannelBridgeFacade(bridge, opts) {
 }
 __name(createDaemonChannelBridgeFacade, "createDaemonChannelBridgeFacade");
 async function loadDaemonSdk() {
-  return await import("./daemon-VSX3FHTY.js");
+  return await import("./daemon-POSQPD3G.js");
 }
 __name(loadDaemonSdk, "loadDaemonSdk");
 function selectedChannelNames(channelsConfig, selection) {
@@ -4882,6 +4882,12 @@ function execGhWithRetry(args, options) {
 __name(execGhWithRetry, "execGhWithRetry");
 var ghHost;
 var HOSTNAME_RE = /^[A-Za-z0-9.-]+(?::\d+)?$/;
+var REPO_SEGMENT = /^[A-Za-z0-9._-]+$/;
+function isOwnerRepo(repo) {
+  const parts = repo.split("/");
+  return parts.length === 2 && parts.every((p) => REPO_SEGMENT.test(p) && p !== "." && p !== "..");
+}
+__name(isOwnerRepo, "isOwnerRepo");
 function setGhHost(host) {
   if (host === void 0 || host === "") {
     ghHost = void 0;
@@ -7096,6 +7102,8 @@ import { join as join9 } from "node:path";
 var DEADLINE_ENV = "QWEN_REVIEW_DEADLINE_EPOCH";
 var RESERVE_ENV = "QWEN_REVIEW_DEADLINE_RESERVE_SECONDS";
 var DEFAULT_RESERVE_SECONDS = 4800;
+var DEFAULT_COMPOSE_FLOOR_SECONDS = 1200;
+var COMPOSE_FLOOR_ENV = "QWEN_REVIEW_DEADLINE_COMPOSE_FLOOR_SECONDS";
 var DEFAULT_ROUND_SECONDS = 1800;
 var MIN_OBSERVED_ROUND_SECONDS = 600;
 var STAMPS_FILE = "budget-rounds.json";
@@ -7154,17 +7162,31 @@ function expectedRoundSeconds(planPath, round, nowMs = Date.now()) {
   return Math.max(MIN_OBSERVED_ROUND_SECONDS, maxSeconds);
 }
 __name(expectedRoundSeconds, "expectedRoundSeconds");
-function reverseAuditBudgetExhausted(env, roundCostSeconds, nowMs = Date.now()) {
+function readDeadlineSeconds(env) {
   const raw = env[DEADLINE_ENV];
   if (raw === void 0 || raw.trim() === "") return null;
   const deadline = Number(raw);
   if (!Number.isFinite(deadline) || deadline <= 0) return null;
-  let reserve = DEFAULT_RESERVE_SECONDS;
-  const reserveRaw = env[RESERVE_ENV];
-  if (reserveRaw !== void 0 && reserveRaw.trim() !== "") {
-    const r = Number(reserveRaw);
-    if (Number.isFinite(r) && r >= 0) reserve = r;
+  return deadline;
+}
+__name(readDeadlineSeconds, "readDeadlineSeconds");
+function readNonNegativeSeconds(env, key, fallback) {
+  const raw = env[key];
+  if (raw !== void 0 && raw.trim() !== "") {
+    const v = Number(raw);
+    if (Number.isFinite(v) && v >= 0) return v;
   }
+  return fallback;
+}
+__name(readNonNegativeSeconds, "readNonNegativeSeconds");
+function reverseAuditBudgetExhausted(env, roundCostSeconds, nowMs = Date.now()) {
+  const deadline = readDeadlineSeconds(env);
+  if (deadline === null) return null;
+  const reserve = readNonNegativeSeconds(
+    env,
+    RESERVE_ENV,
+    DEFAULT_RESERVE_SECONDS
+  );
   const remainingSeconds = Math.floor(deadline - nowMs / 1e3);
   if (remainingSeconds >= reserve + roundCostSeconds) return null;
   return {
@@ -7174,6 +7196,26 @@ function reverseAuditBudgetExhausted(env, roundCostSeconds, nowMs = Date.now())
   };
 }
 __name(reverseAuditBudgetExhausted, "reverseAuditBudgetExhausted");
+function verifyBudgetExhausted(env, nowMs = Date.now()) {
+  const deadline = readDeadlineSeconds(env);
+  if (deadline === null) return null;
+  const floor = readNonNegativeSeconds(
+    env,
+    COMPOSE_FLOOR_ENV,
+    DEFAULT_COMPOSE_FLOOR_SECONDS
+  );
+  if (floor <= 0) return null;
+  const remainingSeconds = Math.floor(deadline - nowMs / 1e3);
+  if (remainingSeconds > floor) return null;
+  return { remainingSeconds, composeFloorSeconds: floor };
+}
+__name(verifyBudgetExhausted, "verifyBudgetExhausted");
+function verifyBudgetMessage(spent) {
+  const minutesLeft = Math.max(0, Math.floor(spent.remainingSeconds / 60));
+  const floorMinutes = Math.round(spent.composeFloorSeconds / 60);
+  return `VERIFY BUDGET: ${minutesLeft} minute(s) remain before this review's deadline \u2014 at or below the ${floorMinutes}-minute floor compose-review and submission need, so no verification shard will be built. This is a termination rule, not an error: do not rebuild the verifier. Proceed to Step 6 NOW and compose. Findings still carrying \`\u2014 [unverified]\` keep that tag: compose-review caps the verdict on it and never treats an unverified finding as a confirmed blocker \u2014 everything earlier rounds confirmed still posts. A review that stops verifying here reports what it proved; one that keeps verifying past this floor is killed before it posts anything.`;
+}
+__name(verifyBudgetMessage, "verifyBudgetMessage");
 var BUDGET_STOP_PHRASE = "review time budget";
 function budgetStopDisclosure(round) {
   const which = round !== void 0 ? `round ${round}` : "the next round";
@@ -7196,6 +7238,45 @@ function budgetStopEntryZh(round) {
   return `${d.subjectZh}\u2014\u2014${d.reasonZh}`;
 }
 __name(budgetStopEntryZh, "budgetStopEntryZh");
+var ROUND_CAP_PHRASE = "reverse-audit round cap";
+function roundCapStopDisclosure(cap) {
+  return {
+    subject: "reverse audit",
+    reason: `did not converge within the ${ROUND_CAP_PHRASE} of ${cap}`,
+    subjectZh: "\u53CD\u5411\u5BA1\u8BA1",
+    reasonZh: `\u5728 ${cap} \u8F6E\u7684\u53CD\u5BA1\u8F6E\u6570\u4E0A\u9650\u5185\u672A\u6536\u655B`
+  };
+}
+__name(roundCapStopDisclosure, "roundCapStopDisclosure");
+function roundCapStopEntry(cap) {
+  const d = roundCapStopDisclosure(cap);
+  return `${d.subject} \u2014 ${d.reason}`;
+}
+__name(roundCapStopEntry, "roundCapStopEntry");
+function roundCapStopEntryZh(cap) {
+  const d = roundCapStopDisclosure(cap);
+  return `${d.subjectZh}\u2014\u2014${d.reasonZh}`;
+}
+__name(roundCapStopEntryZh, "roundCapStopEntryZh");
+function writeRoundCapStop(planPath, cap, round, nowMs = Date.now()) {
+  try {
+    const dir = promptRecordDir(planPath);
+    mkdirSync5(dir, { recursive: true });
+    const stop = {
+      cause: "round-cap",
+      cap,
+      entry: roundCapStopEntry(cap),
+      entryZh: roundCapStopEntryZh(cap),
+      round: round ?? null,
+      remainingSeconds: 0,
+      reserveSeconds: 0,
+      atMs: nowMs
+    };
+    writeFileSync5(join9(dir, STOP_FILE), JSON.stringify(stop, null, 2));
+  } catch {
+  }
+}
+__name(writeRoundCapStop, "writeRoundCapStop");
 function writeBudgetStop(planPath, spent, round, nowMs = Date.now()) {
   try {
     const dir = promptRecordDir(planPath);
@@ -7234,13 +7315,16 @@ function reverseAuditBudgetMessage(spent, round) {
   const reserveMinutes = Math.round(spent.reserveSeconds / 60);
   const roundMinutes = Math.round(spent.expectedRoundSeconds / 60);
   const which = round !== void 0 ? `round ${round}` : "the next round";
-  return `BUDGET: ${minutesLeft} minute(s) remain before this review's deadline \u2014 not enough for the ~${roundMinutes}-minute round being asked for plus the ${reserveMinutes}-minute reserve kept for its verification, compose-review and submission \u2014 so no further reverse-audit round will be built. This is the loop's termination rule, not an error: do not rebuild ${which} and do not relaunch auditors. A budget-stop marker has been recorded and compose-review will disclose it and cap the verdict itself; also add exactly this entry to unreviewedDimensions so the terminal report says it too \u2014 \`${budgetStopEntry(round)}\` \u2014 and proceed to Step 6 with the findings already confirmed. Spend what time remains only on verifying findings already in hand, composing, and submitting. A review that stops here still reports everything it proved; a review that runs past its deadline is killed holding all of it.`;
+  return `BUDGET: ${minutesLeft} minute(s) remain before this review's deadline \u2014 not enough for the ~${roundMinutes}-minute round being asked for plus the ${reserveMinutes}-minute reserve kept for its verification, compose-review and submission \u2014 so no further reverse-audit round will be built. This is the loop's termination rule, not an error: do not rebuild ${which} and do not relaunch auditors. A budget-stop marker has been recorded and compose-review will disclose it and cap the verdict itself; also add exactly this entry to unreviewedDimensions so the terminal report says it too \u2014 \`${budgetStopEntry(round)}\` \u2014 and proceed to Step 6. Verify the last round's findings ONLY through \`agent-prompt --role verify\` (never a hand-rolled agent) \u2014 it is gated on the compose floor and will refuse once too little time remains, leaving any still-\`[unverified]\` findings tagged for compose-review to cap \u2014 then compose and submit. Do NOT re-verify findings already confirmed in earlier rounds. A review that stops here still reports everything it proved; a review that runs past its deadline is killed holding all of it.`;
 }
 __name(reverseAuditBudgetMessage, "reverseAuditBudgetMessage");
 
 // packages/cli/src/commands/review/lib/budget.ts
 init_esbuild_shims();
 var SWEEP_FLOOR = 25;
+var MAX_REVERSE_AUDIT_ROUNDS = 5;
+var HUGE_REVERSE_AUDIT_ROUNDS = 3;
+var HUGE_DIFF_FLOOR = 3e3;
 var SPECIALIST_FLOOR = 80;
 var LINES_PER_ANGLE = 60;
 var MIN_INLINE_ANGLES = 3;
@@ -7262,16 +7346,28 @@ function reviewBudget(input) {
   return {
     inlineAngles,
     sweep: effective >= SWEEP_FLOOR,
-    specialistCap: src >= SPECIALIST_FLOOR ? 2 : 0,
+    // Agent 8 sheds in the huge zone. A specialist is a whole-diff pass on
+    // top of the base fan-out, and on a diff too big to finish that extra
+    // pass is the marginal cost that guarantees zero posted output — while
+    // the per-chunk fan-out already covers the ground. Finishability over
+    // an added depth pass, in exactly the band where the review otherwise
+    // posts nothing.
+    specialistCap: src >= SPECIALIST_FLOOR && effective < HUGE_DIFF_FLOOR ? 2 : 0,
     verifyShard: VERIFY_SHARD,
     agentToolBudget: clamp(
       MIN_AGENT_TOOL_BUDGET + Math.floor(effective / LINES_PER_TOOL_CALL),
       MIN_AGENT_TOOL_BUDGET,
       MAX_AGENT_TOOL_BUDGET
-    )
+    ),
+    reverseAuditRounds: effective >= HUGE_DIFF_FLOOR ? HUGE_REVERSE_AUDIT_ROUNDS : MAX_REVERSE_AUDIT_ROUNDS
   };
 }
 __name(reviewBudget, "reviewBudget");
+function reverseAuditRoundCap(budget) {
+  const v = budget?.reverseAuditRounds;
+  return typeof v === "number" && Number.isInteger(v) && v >= HUGE_REVERSE_AUDIT_ROUNDS && v <= MAX_REVERSE_AUDIT_ROUNDS ? v : MAX_REVERSE_AUDIT_ROUNDS;
+}
+__name(reverseAuditRoundCap, "reverseAuditRoundCap");
 var MAX_TOTAL_TOOL_CALLS = 200;
 function launchToolBudget(planBudget, territoryLines, mandatoryReads) {
   const base = clamp(
@@ -7293,10 +7389,10 @@ function launchToolBudget(planBudget, territoryLines, mandatoryReads) {
   );
 }
 __name(launchToolBudget, "launchToolBudget");
-var BUDGET_GAP_LINE_RE = /^[ \t]*(?:[-*+]|\d+[.)])?[ \t]*(`?)[*_~]{0,3}(?:budget gap|预算(?:缺口|不足|用尽))[*_~]{0,3}[ \t]*[:：][*_~]{0,3}[ \t]*(.+?)[ \t]*$/i;
+var BUDGET_GAP_LINE_RE = /^(?:[ \t]*(?:[-*+]|\d+[.)]))?[ \t]*(`?)[*_~]{0,3}(?:budget gap|预算(?:缺口|不足|用尽))[*_~]{0,3}[ \t]*[:：][*_~]{0,3}[ \t]*(.+)$/i;
 var GAP_HINT_RE = /budget gap|预算(?:缺口|不足|用尽)/i;
 var INLINE_BUDGET_GAP_RE = /(?:budget gap|预算(?:缺口|不足|用尽))[*_~`]{0,3}[ \t]*[:：]/i;
-var PLACEHOLDER_GAP_RE = /^(?:<[^>]*>|none\b.*|n\/a\b.*|nothing\b.*|no (?:gaps?|checks?)\b.*|[-—*_~`]+)$/i;
+var PLACEHOLDER_GAP_RE = /^(?:<[^>]*>$|[-—*_~`]+$|(?:none|n\/a|nothing|no (?:gaps?|checks?))\b(?:[.!…,;:\s]*$|\s+(?:skipped|found|to report)\b[.!…,;:\s]*$|\s*[-—–]\s*(?:stayed\s+(?:under|within|below)\s+budget\b[.!…,;:\s]*$|(?:all|every(?:thing)?|planned|further|no further)\b(?:(?!\b(?:but|except|excepting|excluding)\b).)*(?<!\b(?:none|nothing|no|zero|never|not)\s)\b(?:complete[ds]?|done|finished|covered)\b[.!…,;:\s]*$)|\s*\(\s*(?:all|every(?:thing)?)\b(?:(?!\b(?:but|except|excepting|excluding)\b)[^()])*(?<!\b(?:none|nothing|no|zero|never|not)\s)\b(?:complete[ds]?|done|finished|covered)\b[.!…,;:\s]*\)\s*$))/i;
 var MAX_GAP_LENGTH = 160;
 var MAX_GAPS_PER_AGENT = 8;
 var DANGEROUS_CHARS_RE = (
@@ -7326,6 +7422,13 @@ function stripWrappers(s) {
   return out;
 }
 __name(stripWrappers, "stripWrappers");
+var TRAILING_GAP_CHAR_RE = /[.!…,;:\s]/;
+function stripTrailingGapChars(s) {
+  let end = s.length;
+  while (end > 0 && TRAILING_GAP_CHAR_RE.test(s.charAt(end - 1))) end--;
+  return s.slice(0, end);
+}
+__name(stripTrailingGapChars, "stripTrailingGapChars");
 function truncateGap(s) {
   const points = [...s];
   return points.length > MAX_GAP_LENGTH ? `${points.slice(0, MAX_GAP_LENGTH).join("")}\u2026` : s;
@@ -7343,7 +7446,8 @@ function budgetGapDisclosures(finalText) {
     }
     if (inFence) continue;
     if (/^[ \t]*>/.test(line)) continue;
-    const m = BUDGET_GAP_LINE_RE.exec(line.replace(DANGEROUS_CHARS_RE, " "));
+    const sanitized = line.replace(DANGEROUS_CHARS_RE, " ").trimEnd();
+    const m = BUDGET_GAP_LINE_RE.exec(sanitized);
     if (!m) continue;
     let raw = m[2] ?? "";
     if (m[1] === "`") {
@@ -7351,11 +7455,12 @@ function budgetGapDisclosures(finalText) {
       raw = raw.slice(0, -1);
     }
     raw = stripWrappers(raw.trim()).trim();
-    const normalized = raw.replace(/[.!…,;:\s]+$/, "").trim();
-    if (normalized.length === 0 || PLACEHOLDER_GAP_RE.test(normalized)) {
+    const normalized = stripTrailingGapChars(raw).trim();
+    const unparenthesized = normalized.startsWith("(") && normalized.endsWith(")") ? normalized.slice(1, -1).trim() : normalized;
+    if (normalized.length === 0 || PLACEHOLDER_GAP_RE.test(unparenthesized)) {
       continue;
     }
-    const key = normalized.toLowerCase();
+    const key = stripTrailingGapChars(unparenthesized).toLowerCase();
     if (seen.has(key)) continue;
     seen.add(key);
     gaps.push(truncateGap(raw));
@@ -8132,6 +8237,82 @@ function withMarker(line) {
   return line.startsWith(CRITICAL_PREFIX) ? line : `${CRITICAL_PREFIX} ${line}`;
 }
 __name(withMarker, "withMarker");
+function planPrIdentity(plan) {
+  if (typeof plan !== "object" || plan === null) return null;
+  const p = plan;
+  const ownerRepo = typeof p.ownerRepo === "string" && isOwnerRepo(p.ownerRepo) ? p.ownerRepo : null;
+  const prNumber = isPositivePrNumber(p.prNumber) ? String(p.prNumber) : null;
+  const host = typeof p.host === "string" && HOSTNAME_RE.test(p.host) ? p.host : null;
+  return ownerRepo && prNumber ? { ownerRepo, prNumber, host } : null;
+}
+__name(planPrIdentity, "planPrIdentity");
+function prIdentityFromPlan(planPath) {
+  if (!planPath) return null;
+  try {
+    return planPrIdentity(JSON.parse(readFileSync10(planPath, "utf8")));
+  } catch {
+    return null;
+  }
+}
+__name(prIdentityFromPlan, "prIdentityFromPlan");
+function linkifyCommentRefs(text, pr) {
+  if (!pr || text.includes("](")) return text;
+  const host = (resolveGhHost(pr.host ?? getGhHost()) ?? "github.com").toLowerCase().replace(/:0*443$/, "").replace(/\.$/, "").replace(/^www\.github\.com$/, "github.com");
+  const base = `https://${host}/${pr.ownerRepo}/pull/${pr.prNumber}`;
+  const commentRef = host === "github.com" ? /\b(issue-level )?comment (\d{6,})\b/gi : /\b(issue-level )?comment (\d+)\b/gi;
+  const issueLevelEntry = /\bissue(?:-level)?\s+comment\b/i.test(text);
+  return text.replace(
+    commentRef,
+    (_m, issueLevel, id) => issueLevel || issueLevelEntry ? `[${issueLevel ?? ""}comment ${id}](${base}#issuecomment-${id})` : `[comment ${id}](${base}#discussion_r${id})`
+  );
+}
+__name(linkifyCommentRefs, "linkifyCommentRefs");
+function formatCannotTell(cannotTell, pr) {
+  const parsed = cannotTell.map((raw) => {
+    const unmarked = raw.startsWith(CRITICAL_PREFIX) ? raw.slice(CRITICAL_PREFIX.length).trim() : raw;
+    const line = linkifyCommentRefs(
+      unmarked.includes("\n") ? unmarked.split("\n").map((seg) => seg.trim()).filter((seg) => seg !== "").join(" ") : unmarked,
+      pr
+    );
+    const idx = line.indexOf(" \u2014 ");
+    return idx === -1 ? { head: line, reason: null } : {
+      head: line.slice(0, idx),
+      reason: line.slice(idx + 3).trim() || null
+    };
+  });
+  const groups = [];
+  const byReason = /* @__PURE__ */ new Map();
+  for (const p of parsed) {
+    const existing = p.reason === null ? void 0 : byReason.get(p.reason);
+    if (existing) {
+      existing.heads.push(p.head);
+      continue;
+    }
+    const group = { reason: p.reason, heads: [p.head] };
+    groups.push(group);
+    if (p.reason !== null) byReason.set(p.reason, group);
+  }
+  const lines = [];
+  for (const { reason, heads } of groups) {
+    if (heads.length === 1) {
+      lines.push(
+        `- ${CRITICAL_PREFIX} ${heads[0]}${reason === null ? "" : ` \u2014 ${reason}`}`
+      );
+    } else {
+      lines.push(
+        `- ${CRITICAL_PREFIX} ${heads.length} entries \u2014 ${reason}:`,
+        ...heads.map((head) => `  - ${head}`)
+      );
+    }
+  }
+  return {
+    en: `Unresolved, please confirm:
+
+${lines.join("\n")}`,
+    zh: `\u672A\u51B3\uFF0C\u8BF7\u786E\u8BA4\uFF1A\u5171 ${cannotTell.length} \u6761\uFF08\u539F\u6587\u672A\u7FFB\u8BD1\uFF0C\u5217\u8868\u89C1\u4E0A\u65B9\u82F1\u6587\u90E8\u5206\uFF09\u3002`
+  };
+}
+__name(formatCannotTell, "formatCannotTell");
 function toCount(value, field) {
   if (value === void 0 || value === null) return 0;
   if (typeof value !== "number" || !Number.isInteger(value) || value < 0) {
@@ -8153,7 +8334,7 @@ function toStringList(value, field) {
 }
 __name(toStringList, "toStringList");
 function stripReviewFooter(entry) {
-  return entry.replace(REVIEW_FOOTER_RE, "");
+  return entry.includes(FOOTER_MARKER) ? entry.replace(REVIEW_FOOTER_RE, "") : entry;
 }
 __name(stripReviewFooter, "stripReviewFooter");
 function toBool(value, field) {
@@ -8236,12 +8417,16 @@ function composeReviewBody(input, cliVersion) {
   if (input.planPath) {
     const stop = readBudgetStop(input.planPath);
     if (stop !== null) {
+      const isRoundCap = stop.cause === "round-cap";
+      const phrase = isRoundCap ? ROUND_CAP_PHRASE : BUDGET_STOP_PHRASE;
       for (let i = unreviewed.length - 1; i >= 0; i--) {
-        if (unreviewed[i].includes(BUDGET_STOP_PHRASE)) {
+        if (unreviewed[i].includes(phrase)) {
           unreviewed.splice(i, 1);
         }
       }
-      budgetEntry = budgetStopDisclosure(stop.round ?? void 0);
+      budgetEntry = isRoundCap ? roundCapStopDisclosure(
+        typeof stop.cap === "number" ? stop.cap : MAX_REVERSE_AUDIT_ROUNDS
+      ) : budgetStopDisclosure(stop.round ?? void 0);
       coverageEntries.push(budgetEntry);
     }
   }
@@ -8620,12 +8805,7 @@ ${footer}`;
       zh: reason ? `\u672A\u5BA1\u67E5\uFF1A${shownZh.join("\u3001")}\u2014\u2014${reasonZh}\u3002` : `\u672A\u5BA1\u67E5\uFF1A${shownZh.join("\u3001")}\u3002`
     });
   }
-  const cannotTellBlock = cannotTell.length === 0 ? [] : [
-    {
-      en: `Unresolved, please confirm: ${cannotTell.map((l) => withMarker(l)).join(" ")}`,
-      zh: `\u672A\u51B3\uFF0C\u8BF7\u786E\u8BA4\uFF1A${cannotTell.map((l) => withMarker(l)).join(" ")}`
-    }
-  ];
+  const cannotTellBlock = cannotTell.length === 0 ? [] : [formatCannotTell(cannotTell, prIdentityFromPlan(input.planPath))];
   const bodyCriticalBlock = bodyCriticals.map((l) => withMarker(l)).map((l) => ({ en: l, zh: l }));
   const contextUnavailableClause = {
     en: "Reviewed diff-only \u2014 the PR\u2019s existing discussion could not be fetched, so this is not an approval and not a no-blockers claim.",
@@ -8747,6 +8927,7 @@ ${footer}`;
       zh: `${suggestionsDiscarded} \u6761\u5EFA\u8BAE\u7EA7\u53D1\u73B0\u65E0\u6CD5\u951A\u5B9A\u5230\u6539\u52A8\u884C\uFF0C\u5DF2\u4E22\u5F03\uFF1B\u6B64\u5904\u65E0\u9700\u8FDB\u4E00\u6B65\u5904\u7406\u3002`
     });
   }
+  const openerCount = clauses.length;
   clauses.push(...cannotTellBlock);
   clauses.push(...notReviewedParts);
   clauses.push(...unverifiedTagsBlock);
@@ -8756,9 +8937,19 @@ ${footer}`;
   if (downgradedFrom === "Request changes" || criticalsUnverified) {
     clauses.push(...bodyCriticalBlock);
   }
+  const openerParts = clauses.slice(0, openerCount);
+  const paragraphs = [
+    ...openerParts.length > 0 ? [
+      {
+        en: openerParts.map((c2) => c2.en).join(" "),
+        zh: openerParts.map((c2) => c2.zh).join(" ")
+      }
+    ] : [],
+    ...clauses.slice(openerCount)
+  ];
   return {
     event: event2,
-    body: render(clauses, " "),
+    body: render(paragraphs, "\n\n"),
     baseEvent,
     cappedBy,
     downgraded,
@@ -8956,14 +9147,14 @@ function bilingualFromPlan(planPath, fetchPrBody2 = fetchPrBodyViaGh) {
   } catch {
     return false;
   }
-  if (typeof plan?.prDescriptionHasHan === "boolean") {
-    return plan.prDescriptionHasHan;
+  const han = plan?.prDescriptionHasHan;
+  if (typeof han === "boolean") {
+    return han;
   }
-  const ownerRepo = typeof plan?.ownerRepo === "string" && plan.ownerRepo ? plan.ownerRepo : void 0;
-  const prNumber = isPositivePrNumber(plan?.prNumber) ? String(plan.prNumber) : void 0;
-  if (!ownerRepo || !prNumber) return false;
+  const pr = planPrIdentity(plan);
+  if (!pr) return false;
   try {
-    return new RegExp("\\p{Script=Han}", "u").test(fetchPrBody2(ownerRepo, prNumber));
+    return new RegExp("\\p{Script=Han}", "u").test(fetchPrBody2(pr.ownerRepo, pr.prNumber));
   } catch {
     return false;
   }
@@ -13580,7 +13771,6 @@ import { dirname as dirname16, join as join14, resolve as resolve17 } from "node
 init_esbuild_shims();
 import { readFileSync as readFileSync20, statSync as statSync11 } from "node:fs";
 import { resolve as resolve16, sep as sep6 } from "node:path";
-var REVERSE_AUDIT_MAX_ROUNDS = 5;
 var RECORD_KEY_RE = /^reverse-audit--chunk-(\d+)--round-(\d+)--[0-9a-f]+$/;
 var REVERSE_AUDIT_MARKER = "reverse-audit";
 function bakedRanges(prompt, diffPath) {
@@ -13745,8 +13935,9 @@ function scheduleReverseAuditRound(planPath, chunkIds, round, env = process.env,
         dryRounds: [lastTwo[0].round, lastTwo[1].round],
         // The next even round — this branch only runs on odd rounds, so
         // that is always round + 1. Whether the cap allows it is the note
-        // composer's question, not the schedule's (see
-        // REVERSE_AUDIT_MAX_ROUNDS).
+        // composer's question, not the schedule's: the plan's cap
+        // (`reverseAuditRoundCap` in budget.ts, floored at the huge-diff
+        // tier's 3) is what the admission gate enforces.
         nextColdCheck: round + 1
       });
     }
@@ -14699,7 +14890,15 @@ function requireAuditableChunks(report) {
   return chunks;
 }
 __name(requireAuditableChunks, "requireAuditableChunks");
-function admitReverseAuditRound(planPath, round) {
+function admitReverseAuditRound(planPath, round, cap) {
+  if (typeof round === "number" && round > cap) {
+    writeRoundCapStop(planPath, cap, round);
+    writeStderrLine(
+      `ROUND CAP: the plan's reverse-audit round cap is ${cap}, and round ${round} is past it. This is a termination rule, not an error \u2014 do not rebuild or retry. A marker has been recorded and compose-review will cap the verdict; still add \`${roundCapStopEntry(cap)}\` to unreviewedDimensions so the terminal report agrees. If the cap round reported findings whose verdicts have not landed, launch their verifiers alone and wait, then proceed to Step 6.`
+    );
+    process.exitCode = 4;
+    return false;
+  }
   const spent = reverseAuditBudgetExhausted(
     process.env,
     expectedRoundSeconds(planPath, round)
@@ -14723,7 +14922,8 @@ __name(refuseConverged, "refuseConverged");
 function runAllChunks(report, planPath, role, findingsContent, rules, round) {
   const chunks = requireAuditableChunks(report);
   let schedule = null;
-  if (role === "reverse-audit" && round !== void 0 && round >= 3) {
+  const retirementReadsFrom = 3;
+  if (role === "reverse-audit" && round !== void 0 && round >= retirementReadsFrom) {
     try {
       schedule = scheduleReverseAuditRound(
         planPath,
@@ -14740,7 +14940,11 @@ function runAllChunks(report, planPath, role, findingsContent, rules, round) {
     refuseConverged();
     return;
   }
-  if (role === "reverse-audit" && !admitReverseAuditRound(planPath, round)) {
+  if (role === "reverse-audit" && !admitReverseAuditRound(
+    planPath,
+    round,
+    reverseAuditRoundCap(report.budget)
+  )) {
     return;
   }
   const dueSet = schedule === null ? null : new Set(schedule.due);
@@ -14772,10 +14976,11 @@ function runAllChunks(report, planPath, role, findingsContent, rules, round) {
 ` + printed;
   });
   const scope = skipped.length === 0 ? "one per chunk" : `one per chunk still under audit (${skipped.length} retired chunk(s) skipped; the retirement note after the end-of-round line says which \u2014 relay it to the terminal)`;
+  const planRoundCap = reverseAuditRoundCap(report.budget);
   const retirementNote = skipped.length === 0 ? [] : [
     `retirement: a chunk whose two most recent audits are substantive dry receipts is cold-checked on alternating rounds instead of audited on every one; a cold check that yields returns it to every-round auditing. Skipped this round:
 ` + skipped.map(
-      (s) => `chunk ${s.chunkId} \u2014 retired: dry in rounds ${s.dryRounds[0]} and ${s.dryRounds[1]}, ` + (s.nextColdCheck > REVERSE_AUDIT_MAX_ROUNDS ? `certificate final \u2014 the ${REVERSE_AUDIT_MAX_ROUNDS}-round hard cap leaves the loop no round for a cold check` : `next cold check round ${s.nextColdCheck}`)
+      (s) => `chunk ${s.chunkId} \u2014 retired: dry in rounds ${s.dryRounds.join(" and ")}, ` + (s.nextColdCheck > planRoundCap ? `certificate final \u2014 the ${planRoundCap}-round cap leaves the loop no round for a cold check` : `next cold check round ${s.nextColdCheck}`)
     ).join("\n")
   ];
   writeStdoutLine(
@@ -14942,9 +15147,21 @@ function runAgentPrompt(args) {
       );
     }
   }
-  if (args.role === "reverse-audit" && !hasChunk && !args.allChunks && !admitReverseAuditRound(args.plan, args.round)) {
+  if (args.role === "reverse-audit" && !hasChunk && !args.allChunks && !admitReverseAuditRound(
+    args.plan,
+    args.round,
+    reverseAuditRoundCap(report.budget)
+  )) {
     return;
   }
+  if (args.role === "verify") {
+    const spent = verifyBudgetExhausted(process.env);
+    if (spent !== null) {
+      writeStderrLine(verifyBudgetMessage(spent));
+      process.exitCode = 4;
+      return;
+    }
+  }
   if (args.role === "reverse-audit" && hasChunk && !readRoundStamps(args.plan).some((s) => s.round === (args.round ?? null))) {
     if (args.round !== void 0) {
       let schedule = null;
@@ -14964,7 +15181,12 @@ function runAgentPrompt(args) {
         return;
       }
     }
-    if (!admitReverseAuditRound(args.plan, args.round)) return;
+    if (!admitReverseAuditRound(
+      args.plan,
+      args.round,
+      reverseAuditRoundCap(report.budget)
+    ))
+      return;
   }
   if (args.allChunks && args.role && findingsContent !== void 0) {
     runAllChunks(
@@ -15021,7 +15243,7 @@ function runAgentPrompt(args) {
 __name(runAgentPrompt, "runAgentPrompt");
 var agentPromptCommand = {
   command: "agent-prompt",
-  describe: "Build a review agent's launch prompt from the plan (the diff path, its line ranges and the agent's own brief are welded in, not left to the caller to remember). Exit codes: 0 built; 4 the review time budget refused another reverse-audit round (a termination rule, not an error \u2014 see the BUDGET line on stderr); 5 the reverse audit CONVERGED \u2014 every chunk holds two consecutive substantive dry audits and none is due a cold check, so stop the loop and proceed to Step 6 (also a termination rule, and a clean one: no disclosure is owed); anything else is a bad call or a broken plan.",
+  describe: "Build a review agent's launch prompt from the plan (the diff path, its line ranges and the agent's own brief are welded in, not left to the caller to remember). Exit codes: 0 built; 4 a build was refused \u2014 the review time budget refused another reverse-audit round (BUDGET line on stderr), the plan's round cap refused one (ROUND CAP line), or the compose floor refused a verifier so compose/submit still fit (VERIFY BUDGET line) \u2014 all termination rules, not errors: stop and compose, do not retry; 5 the reverse audit CONVERGED \u2014 every chunk holds two consecutive substantive dry audits and none is due a cold check, so stop the loop and proceed to Step 6 (also a termination rule, and a clean one: no disclosure is owed); anything else is a bad call or a broken plan.",
   builder: /* @__PURE__ */ __name((yargs) => yargs.option("plan", {
     type: "string",
     demandOption: true,
@@ -17527,15 +17749,9 @@ function inconsistencies(payload, event2) {
   return problems;
 }
 __name(inconsistencies, "inconsistencies");
-var REPO_SEGMENT = /^[A-Za-z0-9._-]+$/;
-function isRepo(repo) {
-  const parts = repo.split("/");
-  return parts.length === 2 && parts.every((p) => REPO_SEGMENT.test(p) && p !== "." && p !== "..");
-}
-__name(isRepo, "isRepo");
 function runSubmit(args, cliVersion = "unknown") {
   setGhHost(args.host);
-  if (!isRepo(args.repo)) {
+  if (!isOwnerRepo(args.repo)) {
     throw new Error(
       `--repo ${JSON.stringify(args.repo)} is not <owner>/<repo>.`
     );
@@ -20923,10 +21139,10 @@ var updateCommand3 = {
       stdioHelpers,
       { updateEventEmitter }
     ] = await Promise.all([
-      import("./settings-BRAOSJIM.js"),
-      import("./updateCheck-EZMBTEIR.js"),
-      import("./installationInfo-BWFHT7WU.js"),
-      import("./standalone-update-DJN2R3YW.js"),
+      import("./settings-EQBUAQ7Y.js"),
+      import("./updateCheck-AXWSO7KA.js"),
+      import("./installationInfo-3YUGIP36.js"),
+      import("./standalone-update-2W26SRRO.js"),
       import("./stdioHelpers-7A2EE64Z.js"),
       import("./updateEventEmitter-5MKC7BLQ.js")
     ]);
@@ -22088,7 +22304,7 @@ async function loadCliConfig(settings, argv, cwd = process.cwd(), overrideExtens
     disabledSlashCommands: disabledSlashCommands.length > 0 ? disabledSlashCommands : void 0,
     disabledSkillNamesProvider: bareMode || safeMode ? void 0 : disabledSkillNamesProvider,
     terminalImageRenderSupportProvider: interactive ? async () => {
-      const { getTerminalImageRenderSupport } = await import("./terminal-image-renderer-PJM7663W.js");
+      const { getTerminalImageRenderSupport } = await import("./terminal-image-renderer-S5WPPQKH.js");
       return getTerminalImageRenderSupport();
     } : void 0,
     disabledSkillLevels: bareMode || safeMode || !Array.isArray(settings.skills?.disabledLevels) ? void 0 : settings.skills.disabledLevels.filter(isSkillLevel),