fix: strip HTML tags from the inline-finding excerpt in the main comment

The short-form excerpt escaped every <, so a model-written <br> showed as literal text. Remove HTML formatting tags first, then escape what is left.
fix: load only the granted read tools in Claude Code review passes
2026-11-13 20:28:06 -10:00 · 2026-10-01 16:28:09 -07:00 · 2026-09-24 10:03:50 -07:00 · 2026-09-23 11:34:00 -07:00 · 2026-09-06 15:52:03 -07:00 · 2026-08-25 23:06:35 -07:00
69 changed files with 3055 additions and 624 deletions
@@ -3,7 +3,7 @@ description: Security and secrets. Injection, credential or secret leakage, unsa
 alwaysRun: true
 # Security is the highest-stakes agent, so it runs on the Opus tier (included in
 # the Max/Team subscription the claude-code engine authenticates with).
-model: anthropic/claude-opus-5
+model: anthropic/claude-opus-5-5
 ---

 # Security & secrets
@@ -2,13 +2,13 @@
  // Default model for every agent. Override per-agent via frontmatter in the
  // agent's markdown, or at runtime with the REVIEWER_MODEL env var
  // (e.g. REVIEWER_MODEL=anthropic/claude-haiku-4-5).
-  "model": "anthropic/claude-sonnet-5",
+  "model": "anthropic/claude-opus-5-5",

  // Agents: every markdown file in agents/ is one reviewer (id = filename).
  // Add or remove files to change the roster — no list needed here.
  // shared.md (prepended to every agent + coordinator) and coordinator.md are
  // reserved filenames. Per-agent overrides go in each file's YAML frontmatter,
-  // e.g. `---\nmodel: anthropic/claude-opus-5\n---`.
+  // e.g. `---\nmodel: anthropic/claude-opus-5-5\n---`.

  "policy": {
    // Phase 1: keep signal high by surfacing only critical/warning.
@@ -57,7 +57,7 @@ jobs:
      # like `opencode-ai` in package.json — an unpinned CLI would silently drift
      # on every CI run; bump it deliberately.
      - name: Install Claude Code CLI
-        run: bun install -g @anthropic-ai/[email protected]12
+        run: bun install -g @anthropic-ai/[email protected]80

      # SECURITY: the TRUSTED BASE checkout above includes .expo-code-review/
      # config.jsonc, whose auth.tokenEnv names the env var the CLI forwards as the
@@ -9,3 +9,4 @@ build/

 # Claude Code local worktrees
 .claude/worktrees/
+.expo-agents/code-review/.runs/
@@ -0,0 +1,230 @@
+# Plan: inline PR comments for in-diff findings (rev 2, post adversarial review)
+
+## Goal
+
+Findings anchored to a line in the PR diff land as inline review comments on
+that line. The main issue comment keeps every finding but renders an inlined
+one SHORT: title + one-line rationale + link to the inline thread. The main
+comment stays the single durable state store (embedded state, dismissals,
+feedback records, pins, `/dismiss` target). Inline comments are a derived
+presentation layer, converged on every run.
+
+## Non-goals (v1)
+
+- No formal `POST /pulls/{n}/reviews` review event: a batched review is atomic
+  (one bad anchor 422s the whole post) and cannot be upserted across runs.
+  Individual review comments isolate failures and PATCH in place.
+- No multi-line comments; single `line` + `side: "RIGHT"` only.
+- No GraphQL thread resolution, and no detection of author-resolved/outdated
+  threads. Accepted risk: the PR author can collapse inline threads; the main
+  comment therefore keeps a one-line rationale per finding (see Short form).
+- `ecr feedback` retroactive crawl keeps reading issue comments only. The
+  review-comments fetch in `replyComments` is gated on the reporter having an
+  ENABLED `inline` option, so the crawl (which passes none) gains no fetches.
+- Scopes removed from the routing manifest strand their comments — same
+  pre-existing behavior as their main comments.
+- Break-glass (`postSkipNote`) leaves inline threads untouched even though it
+  overwrites the embedded state. Accepted, documented.
+
+## Config
+
+Root-only key in `ReviewConfigSchema`, locked out of scope configs with
+`z.never` like `feedback`:
+
+```jsonc
+inline: {
+  enabled: false,        // ship dark
+  maxComments: 20        // cap per posted comment's reporter (per PR in single/
+                         // legacy mode; per scope in per-scope mode — documented)
+}
+```
+
+Wired into `LoadedConfig`, `load.ts` defaults, all five reporter construction
+sites, and `reviewPostingConfigFingerprint` (posting behavior changes with it,
+so a saved deferred review must not post under a different inline policy).
+Turning it OFF later leaves existing threads up (documented; `clear()` still
+sweeps them on mode switches, and a manual cleanup is possible).
+
+## Inline comment identity
+
+Marker, at byte 0 of the body, parsed with an ANCHORED regex and a hex-only
+charset:
+
+```
+<!-- <tag>:inline:fp=<[a-f0-9]{6,64}> -->
+```
+
+- Identity = author (`user.login === ownLogin`) + anchored marker; marker alone
+  is never identity (selectOwnComments model). ownLogin unresolvable ⇒ nothing
+  is ours AND no creates either (fail closed, no duplicate storms).
+- Byte-0 anchoring also narrows the shared `github-actions[bot]` confused-deputy
+  risk: an echo-bot that prefixes any content fails the anchor.
+- fp is the id the owning main comment renders (plain, or scope-namespaced for
+  the aggregate). Substring safety vs `<!-- tag -->` / `<!-- tag:scope -->`
+  holds in both directions (closing ` -->` differs), incl. a scope named
+  `inline`.
+
+## Inline comment body
+
+Marker line, then the finding rendered in full (severity, title, category,
+`id:<fp>` token, rationale, sources, suggestion — every model-written field
+through `stripStateMarkers`), then a footer: "Reply here to respond; write
+`id:<fp>` in your reply (unquoted) to formally answer it."
+
+**Self-reply backstop (was blocker):** the body carries an unquoted `id:` token,
+and today's `OWN_COMMENT_RE` (`:state=|:fingerprints=`) would NOT exclude it if
+identity/tag filters ever miss (bot-login fallback, commentTag rename, second
+posting identity). Fixes, all three:
+- `responses.ts` gains a tag-independent backstop: a body whose UNQUOTED lines
+  contain `:inline:fp=` is never treated as a reply (quoted lines excluded so a
+  GitHub "Quote reply" of our inline comment — which copies the marker behind
+  `> ` — still counts as a genuine reply).
+- `replyComments` applies the same unquoted-line rule for the tag-specific
+  marker.
+- Test: an inline body is never matched as a reply even with `ownLogin: null`
+  and a foreign tag; a quote-reply containing the quoted marker IS matched.
+
+## Reporter mechanics
+
+New option `inline?: LoadedConfig["inline"]`.
+
+### Fetch layer
+
+`fetchAllReviewComments()`: paginated GET `repos/{repo}/pulls/{n}/comments`
+(fields: id, body, path, line, user.login, html_url, in_reply_to_id,
+author_association). Cached in a MODULE-LEVEL map keyed
+`prNumber\nrepo\ncwd` (the prAuthorByPr pattern) with the same 30s TTL and
+invalidate-on-mutation — routed single-mode runs call `clear()` on a fresh
+reporter per scope, and per-instance caching would multiply listings. Note:
+this endpoint DOES honor sort/direction (unlike issue comments) — do not copy
+that rationale comment; a full scan is still needed.
+
+### Sync
+
+`syncInline(targets, link, opts: { teardown: boolean })` runs inside
+`report()` / `reportAggregate()` before rendering; returns `Map<fp, url>`.
+
+Targets = ACTIVE findings only (not dismissed, not reply-cleared, not
+requalified) with `line != null` and `diffLines.get(file).has(line)`.
+
+**Cap (sticky, was churn bug):** order candidates by severity rank then fp
+(deterministic); fill slots preferring fps that ALREADY have a live inline
+comment, then admit new ones. A live thread is never evicted to create a new
+one.
+
+**Teardown gating (was blocker):** stubs/deletes run ONLY when
+`opts.teardown` is true, which callers set as:
+- `report()`: `!review.couldNotComplete`.
+- `reportAggregate()`: caller-passed flag — ci.ts passes
+  `!scopesFilter && results.every(r => !r.review.couldNotComplete)`. A partial
+  `--scopes` run or any failed scope makes the run additive-only (creates +
+  patches, no stubs/deletes), because carried/truncated/failed state cannot
+  prove a finding is gone. (`scopedFingerprint` is opaque hex — a per-scope
+  stale set cannot be derived from fps, so the gate is all-or-nothing.)
+- `applyDismissal`: never computes a stale set. Additive-only: stub threads of
+  the explicitly dismissed fps; on `/undismiss`, re-patch the full body if the
+  finding is present in state (skip if truncated away).
+- Prereq fix: both failure literals (`ci.ts` legacy catch and
+  `failureReview()`) gain `couldNotComplete: true` — today they post
+  empty-findings reviews WITHOUT the flag and would tear everything down. Side
+  effects checked: the decision label becomes the accurate "No review — every
+  pass failed", and caching is unaffected (failures already never carry
+  inputHash).
+
+**Stub text (was blocker):** neutral — "This finding is no longer tracked
+inline — see the main review comment for current status." Never
+"resolved/dismissed": a capped-out or drifted finding is still active.
+
+**Mutations** (sequential, never parallel):
+- create: POST with body/commit_id=headSha/path/line/side. Creates require
+  headSha AND a live-head check: one `gh pr view --json headRefOid` per sync
+  (only when creates exist); mismatch ⇒ skip creates, log (a mid-review push
+  means our diff no longer matches the head; a stale commit_id can silently
+  anchor to wrong code, and a force-push 422s every create).
+- patch: only when the normalized body differs (`\r\n` → `\n`) — no PATCH-per-
+  finding-per-run forever.
+- stale (teardown only): thread has replies ⇒ PATCH to the neutral stub
+  (marker kept, so a returning finding revives the thread); no replies ⇒
+  DELETE. Reply detection: any listed comment with `in_reply_to_id` == our id
+  (same snapshot; the reply-between-list-and-delete race is accepted, noted in
+  tests).
+- duplicates (crash window): keep newest per fp, older are stale.
+- 422 on create ⇒ log once + skip that finding (renders full-form). 403/429
+  (secondary rate limit) ⇒ log + abort ALL remaining mutations this run.
+- Audit (was silent): stderr one-liner + step-summary line:
+  `inline sync: N created, N patched, N stubbed, N deleted, N failed`.
+
+Every mutation individually try/caught; the inline layer never blocks the main
+comment. Listing failure ⇒ empty map, no mutations.
+
+### clear()
+
+Extends to inline comments under this reporter's tag, gated on marker+author
+only (NOT on `enabled`, so mode switches clean up after a disable): replied
+threads are STUBBED, bare ones deleted — never delete a thread humans wrote in
+(ci.ts calls clear() on mode switches and scope reconciliation). This also
+covers the fp-namespace flip on per-scope↔single switches, symmetric with how
+main comments are cleared today.
+
+### Main-comment short form
+
+- `LinkContext.inlineUrls?: Map<string, string>`. NEVER mutate the shared
+  routed-flow `link` object — render with a copy `{ ...link, inlineUrls }`.
+- `renderFindingLines` with an inline URL: `- **title** —
+  [file:line](thread-url) _(category)_ · id:… · 💬 [inline](url)` + reply
+  annotation + ONE-LINE truncated rationale (~160 chars, word boundary) — the
+  audit trail survives the author collapsing/resolving inline threads.
+  Sources/suggestion/full rationale live inline only. Missing URL ⇒ full form
+  (tested).
+- Embedded state unchanged.
+
+### Inline replies → feedback
+
+- `replyComments()` maps review comments too — ONLY when
+  `options.inline?.enabled` (keeps `ecr feedback` crawl and non-inline repos at
+  zero extra fetches). Excludes own login; excludes bodies whose unquoted lines
+  carry our markers.
+- **Id namespace (was collision risk):** review-comment-sourced ReplyComments
+  get `id = -reviewCommentId`. Negative ids flow into FeedbackRecord.commentId
+  (schema unchanged — number stays a number) and are consistent across runs, so
+  mergeFeedback's `commentId` equality and buildAdjudicationItems' body lookup
+  stay collision-free vs the positive issue-comment space.
+- `applyPins` gains a cross-stream guard: a pin is lifted only by a maintainer
+  record whose commentId is newer AND in the SAME stream (same sign). A
+  different-stream comparison is undecidable ordering ⇒ keep the pin (fail
+  closed).
+- `ReplyComment.threadFp?: string`: set when the reply's `in_reply_to_id`
+  resolves to OUR (author+anchored-marker) top-level inline comment's fp.
+  `matchReplies` treats a known threadFp as a match in EVERY `match` mode
+  (structural signal, not text matching; documented + tested). `citedId` is
+  unchanged: clearing still requires the replier's own unquoted `id:` token.
+- Newest-wins across streams: negative ids lose to positive ones by raw
+  comparison; acceptable because only the newest record per fp matters and a
+  same-fp cross-stream tie is rare; the applyPins guard removes the dangerous
+  consequence.
+
+## Files touched
+
+- `src/config/schema.ts`, `src/config/load.ts` — `inline` key + lock + defaults.
+- `src/core/deferred-review.ts` — fingerprint includes `inline`.
+- `src/reporters/github.ts` — review-comments fetch (shared cache), syncInline
+  + pure exported planner, replyComments extension, clear(), applyDismissal
+  additive sync.
+- `src/core/render.ts` — inline marker helpers (anchored parse), inline body
+  renderer, `LinkContext.inlineUrls`, short form + rationale truncation.
+- `src/core/responses.ts` — threadFp, unquoted-marker backstop.
+- `src/core/schema.ts` — applyPins same-stream guard.
+- `src/commands/ci.ts` — wire config, `couldNotComplete: true` on both failure
+  literals, aggregate teardown flag. `review.ts`, `post-review.ts`,
+  `dismiss.ts` — wire config.
+- Tests: planner (create/patch/stub/delete, sticky cap, dedupe, additive mode),
+  marker anchor/forgery, short form + missing-URL fallback, backstop vs
+  quote-reply, threadFp in all match modes, applyPins stream guard,
+  couldNotComplete literals.
+- `templates/config.jsonc`, `README.md`.
+
+## Rollout
+
+Ship dark. Note in README: first enable on a large PR fires one notification
+per created inline comment (cap bounds it). Enable on this repo first, then
+expo/expo after one observed cycle.
@@ -222,7 +222,7 @@ PRs** (do these first, in this order):
  `gh pr checkout`s the PR head; it builds/runs only the trusted base ref. See
  "Reliability & security" below for the residual work.
 - **Failure-path hardening (audit 2026-07-22)** — a failed/timed-out run never
-  renders as a clean "Approve"; the coordinator has its own 5-min cap +
+  renders as a clean "Ready for human review"; the coordinator has its own 5-min cap +
  soft-landing and a deterministic local-merge fallback (a coordinator hiccup no
  longer discards all findings); CI always posts a terminal state on failure;
  coverage notes now include filtered (binary/generated/ignored) files; the
@@ -342,7 +342,7 @@ Guarantees (priority order; ✅ = shipped):
 4. ✅ **Always post a result** — a failed run reports "could not complete"; CI
   posts a terminal state on any failure; the coordinator has a deterministic
   fallback so its failure can't discard findings; and a failed/timed-out run
-   never renders as a clean "Approve".
+   never renders as a clean "Ready for human review".
 5. ✅ **Global time budget.** *(Shipped 2026-07-22; retuned 2026-07-26.)*
   `PASSES_BUDGET_MS` (55m) is a hard wall-clock ceiling for all passes incl.
   subdivision/fallback waves: past it, a timed-out pass is reported as a gap rather
@@ -37,7 +37,7 @@ These hold repo-wide. Each is owned in detail by one doc; break any of them and

 1. **Trusted base-commit config.** Review policy and executable reviewer config (`config.jsonc`, `routing.jsonc`, prompts, models, auth/`tokenEnv` mapping) load only from the PR's immutable base commit; the PR head is untrusted data used only for diff/source content and finding verification [observed: commit `601b19a` "Trusted base-commit configuration by default; isolate the runtime from PR-head config"; PLAN-trusted-base-config.md]. Owned by [LLP 0001](0001-trust-model.principles.md) / [LLP 0006](0006-config-schema-loading-routing.explainer.md).
 2. **Single-source `tokenEnv`.** `auth.tokenEnv` is honored in exactly one place (root config or `routing.jsonc` `defaults.auth`), enforced twice: schema-level (scope configs reject `auth`/`breakGlass`) and CI-guard level (`verify-config` sweeps every config file) [observed: AGENTS.md:51-53; src/core/auth.ts:45,206 `FORBIDDEN_TOKEN_ENVS`]. Owned by [LLP 0006](0006-config-schema-loading-routing.explainer.md).
-3. **A failed run never reads as Approve, and `ecr ci` never fails checks.** A failed, partial, or timed-out run must never render as a clean "Approve"; `ci` is comment-only and non-blocking [observed: src/commands/ci.ts:60 "non-blocking (a reviewer failure never fails the PR's checks)"; AGENTS.md:50]. Owned by [LLP 0007](0007-cli-commands-and-ci.explainer.md).
+3. **A failed run never reads as Approve, and `ecr ci` never fails checks.** A failed, partial, or timed-out run must never render as a clean "Ready for human review"; `ci` is comment-only and non-blocking [observed: src/commands/ci.ts:60 "non-blocking (a reviewer failure never fails the PR's checks)"; AGENTS.md:50]. Owned by [LLP 0007](0007-cli-commands-and-ci.explainer.md).
 4. **Critical/secrets findings are never silently suppressed.** A critical- or secrets-severity finding can never be silently dropped by any mechanism except the explicit `/skip-review` marker; all other suppression is a display filter, never a review skip [observed: src/core/suppress.ts:21-23,39-43 (critical/secrets findings are never dropped by the inline-ignore backstop)]. Owned by [LLP 0005](0005-verification-fingerprints-rendering.explainer.md).
 5. **Read-only agents.** Reviewer agents run with read-only tools only (read/grep/glob/list for OpenCode; Read/Grep/Glob for Claude Code passes) — never Bash/Edit/Write/WebFetch/WebSearch [observed: src/core/claude-code.ts:80-85 `READ_TOOL_MAP`/`ALL_READ_TOOLS`]. Owned by [LLP 0003](0003-model-runtimes-and-credentials.explainer.md).
 6. **Stateless runs.** Prior comments, findings, and dismissal state are never fed back into review agents; every run is stateless over (diff + repo + PR title/body) [observed: src/core/prompts.ts:132-174 (the reviewer task is built only from the current diff, not prior findings); src/commands/dismiss.ts:1 (dismissal is a display-only mutation that never re-runs the review); src/core/render.ts:144]. Owned by [LLP 0002](0002-review-engine-pipeline.explainer.md).
@@ -59,7 +59,7 @@ The degraded paths keep a failed run honest:
 - **Coordinator failure never discards findings.** If `coordinate()` throws, `fallbackConsolidation()` merges and dedupes the agents' findings by fingerprint and picks a conservative decision — `request_changes` on any critical, else `approve_with_comments`, never a clean approve when findings exist [observed] (`review.ts:800-809`, `978-1009`).
 - **`applyReviewPolicy` runs identically on both paths** — the coordinator's normal output and the local fallback both pass through the same policy (drop suggestions unless opted in, sort by severity, cap by `maxFindings`, downgrade `approve_with_comments`→`approve` when nothing remains), so enforcement can't diverge between the happy and degraded paths [observed] (`review.ts:792` and `998-1008`).
 - **Any failed/timed-out pass forces the decision off a clean approve** — downgraded to `approve_with_comments` at minimum, independent of what the coordinator decided [observed] (`review.ts:810-815`).
- **An all-failed run sets `couldNotComplete`.** When every pass fails or times out, the run is never rendered as a normal decision string; the flag overrides presentation so the comment header can't read "Approve with comments" over a review that reviewed nothing [observed] (`review.ts:764-777`; commit `188f852`, euxy#8).
+- **An all-failed run sets `couldNotComplete`.** When every pass fails or times out, the run is never rendered as a normal decision string; the flag overrides presentation so the comment header can't read "Ready for human review (with comments)" over a review that reviewed nothing [observed] (`review.ts:764-777`; commit `188f852`, euxy#8).

 ## Post-Coordination Order

@@ -96,6 +96,29 @@ POSIX, where `execvp` never searches cwd. This is a knowingly accepted residual,
 oversight, and must not be silently reintroduced as a "fix" ([observed]
 `opencode.ts:305-314`).

+### Muse Spark via Meta Model API
+
+Muse Spark uses the existing OpenCode engine, but OpenCode `1.18.4` does not ship a
+resolvable `meta` provider. `buildOpencodeConfig` therefore synthesizes one only for an
+in-use `meta` API-key entry without an `upstream`; an entry with `upstream` remains an
+alias and never redirects that upstream's credential to Meta. The native provider's
+destination is fixed to `https://api.meta.ai/v1`, its credential is an environment
+interpolation (never the key value), and its adapter is `@ai-sdk/openai` so requests use
+the Responses API and preserve encrypted reasoning across tool turns. The generic
+`@ai-sdk/openai-compatible` adapter is deliberately not used because its Chat
+Completions path loses that continuity [observed:
+`opencode.ts` `META_MODEL_API_BASE_URL` / `META_MUSE_MODELS` / `buildOpencodeConfig`].
+
+Provider selection is forward-compatible at the provider boundary, not coupled to the
+current Muse family name: every referenced non-empty `meta/<model>` id is declared on
+the synthesized Meta provider. Known Muse Spark 1.2 and 1.3 standard/Contributor ids
+receive their published limits, multimodal inputs, high reasoning, and encrypted
+reasoning inclusion from `META_MUSE_MODELS`; a future id such as `meta/muse-foo` is
+declared with neutral metadata rather than guessed capabilities. This deliberately
+moves validation of an unknown-but-well-formed Meta id from OpenCode's local preflight
+to its first Meta request, in exchange for new Meta names working without an ECR
+release [observed: `opencode.ts` `META_MUSE_MODELS` / `buildOpencodeConfig`].
+
 ## Claude Code CLI Containment

 The Claude Code engine runs each review pass as a single stateless
@@ -151,12 +174,22 @@ reads are denied by the unmatched-rule denial, and a withheld tool is denied by
 ([observed] `claude-code.ts:241-321`; behavior verified against `claude 2.1.212`).
 Write/exec/network tools (`Bash`, `Edit`, `Write`, `NotebookEdit`, `WebFetch`,
 `WebSearch`, `Task`, …) are always denied for every pass regardless of role, via the
-`ALWAYS_DENIED_TOOLS` enumeration. A deny **enumeration** is used rather than an
-allow-only model because permission rules cannot fail closed for tools outside the read
-set and a `*` deny breaks tool calling outright — both verified against `claude 2.1.212`.
-The residual (a future CLI version shipping a new read-capable tool this list does not
-name) is bounded by pinning the CLI version, so **the list must be revisited on every
-pinned-version bump** ([observed] `claude-code.ts:86-111`).
+`ALWAYS_DENIED_TOOLS` enumeration. Permission rules alone cannot fail closed for tools
+outside the read set, and a `*` deny breaks tool calling outright — both verified
+against `claude 2.1.212`.
+
+**`--tools` is the outer bound.** `--tools` is not a permission rule: it names the
+built-in tools the CLI **loads**. ecr passes exactly the granted read tools
+(`Read,Grep,Glob` or fewer), and `""` for the coordinator and the no-tools fallback.
+A tool that is not loaded cannot be called, so a new tool in a future CLI version
+stays out without anyone adding its name. The deny list was not enough on its own:
+against `claude 2.1.280`, `dontAsk` rejected `Monitor` and `Workflow`, but
+`EnterWorktree` created a git worktree, `RemoteTrigger` listed the logged-in
+account's cloud routines, and `SendMessage` and `Skill` ran, because those tools ask
+no permission. MCP tools (the research tools) and the CLI's `StructuredOutput` tool
+(used by `--json-schema`) are outside the built-in set and stay loaded — also verified
+against `2.1.280`. The scoped allow rules and `ALWAYS_DENIED_TOOLS` stay as inner
+layers ([observed] `claude-code.ts` `buildClaudeArgs`, `ALWAYS_DENIED_TOOLS`).

 **The env is an allowlist.** The child env is built from `CHILD_ENV_ALLOWLIST` (PATH,
 HOME, locale, tmp, proxies, config dirs — what a CLI needs and nothing else), never a
@@ -184,8 +184,7 @@ hardcoded to a read-only tool set (`read`/`grep`/`glob`/`list`) with no schema k
 write/bash [observed: `load.ts:126-155`, `load.ts:22-23`].

 `resolveConfigDir` is the escape hatch (graft 1): precedence is explicit param → `ECR_CONFIG_DIR` env
-→ the repo's default `.expo-code-review/`, and with neither override the result is byte-identical to
-the default path [observed: `load.ts:29-41`]. `hasConfig` resolves the config dir the same way, so
+→ the repo's default setup dir [observed: `load.ts`]. **The default setup dir has two spellings** (0.15.0): `.expo-agents/code-review/` is the home — one `.expo-agents/` directory holds every Expo agent tool's per-repo files (this tool's and `@expo/verify`'s) instead of one root dot-directory per tool — and the pre-0.15 `.expo-code-review/` stays fully supported. `configDirFor(base)` returns whichever exists, new name first, and the new name when neither does; it is used for the root and for every scope directory, `ecr init` writes into an existing legacy directory rather than doubling it, the config-file sweep (`isConfigDirPath`) and the reference index accept both, and the CI templates upload `.runs/reviews.jsonl` from either location. `.agents/` was rejected as the shared name because Codex, Cursor, Gemini CLI and Copilot already scan `.agents/skills/`. `hasConfig` resolves the config dir the same way, so
 `doctor`'s "no config" diagnostic can never disagree with what the loader actually reads
 [observed: `load.ts:55-60`]. The override designates an alternate ROOT config dir, so `config.jsonc`
 and `routing.jsonc` always travel together: `loadRoutingManifest` reads through the same
@@ -137,6 +137,7 @@ doctor resolves auth the way real reviews do: a `routing.jsonc` `defaults.auth`
 - It hands out only ACCESS tokens; the refresh token never leaves OpenCode's store, because OpenCode's refresh tokens are SINGLE-USE (rotation) and OpenCode is their sole legitimate consumer — a copy in a shell config or CI secret dies on the next rotation and can take the whole sign-in down with it [observed: `src/commands/setup-auth.ts:87-93`].
 - The exported shell line single-quotes the token value so a token containing shell metacharacters (`$HOME`, `!`) is never expanded when sourced [observed: `src/commands/setup-auth.ts:127-131`; test in `src/__tests__/setup-auth.test.ts`].
 - `anthropic` auth is always satisfied by the Claude Code CLI subscription-login flow regardless of the declared `mode` (oauth vs api-key) — mode is irrelevant for that provider [observed: `src/commands/setup-auth.ts:50-59`].
+- A `meta` API-key entry is a manual-key plan: setup-auth points to the Meta AI developer portal and prints the configured `META_API_KEY` export, while doctor uses the same generic provider readiness check as the real review [observed: `src/commands/setup-auth.ts` `planFromAuth` / manual-key guidance; `src/core/auth.ts` `PROVIDER_KEY_ENV`].
 - The two interactive logins run via `spawnSync` with `stdio: "inherit"` and `cwd: os.tmpdir()` — the tmpdir cwd keeps a possibly-untrusted checkout from becoming the login subprocess's working directory, and the `inherit` stdio is why these two calls cannot be converted to `exec.ts`'s capturing `run()` [observed: `src/commands/setup-auth.ts:200-203,256-259`].

 ## init and dismiss
@@ -55,6 +55,15 @@ The three workflows share a posture built entirely around one fact: a reviewer j

 **Concurrency defaults by auth mode.** The commented `chunk.concurrency` default is 6 for an API key and 3 for a subscription (OAuth) credential, "one account handles many parallel streams poorly, and several PRs may review on the same credential at once" [observed: `templates/config.jsonc:28-30`].

+**Muse Spark is opt-in without weakening the default secret surface.** The root config
+documents `meta/muse-spark-1.3` plus a `META_API_KEY` auth entry, and each
+review-running workflow shows the corresponding secret line commented out. It is not
+forwarded by the default scaffold: adopters replace the Anthropic line and set
+`ECR_EXPECTED_TOKEN_ENV=META_API_KEY`, so the model process receives only the
+credential actually selected by trusted config. The default remains Anthropic and
+`dismiss.yml` still receives no model credential [observed: `templates/config.jsonc`;
+`templates/workflow.yml`, `command.yml`, and `atlantis.yml`].
+
 **Keep the `**/*` catch-all first in `routing.jsonc`.** Scopes match last-match-wins, so a `**/*` catch-all must come first and more specific scopes come after to override it [observed: `templates/routing.jsonc:27-31`; `AGENTS.md:17-18`]. Nothing validates the order — reversing it silently changes which config applies to already-routed files [inferred: no code checks that the `**/*` catch-all comes first, so reversing it silently changes routing].

 **`scope-config.jsonc` deliberately omits `auth` and `commentTag`.** It is a *different* template from the root `config.jsonc`, not a copy. A scope config carries no `auth` block — credentials are root-only, and the loader plus the CI guard reject a scope config that declares one [observed: `templates/scope-config.jsonc:1-3`; `AGENTS.md:51`]. It also omits `commentTag`, because a scope's PR-comment marker is always derived as `<rootTag>:<scope-name>` so `ecr ci` and `ecr review --scope --post` target the same comment; declaring one is rejected by the scope schema [observed: `templates/scope-config.jsonc:23-25`]. Reusing the root `config.jsonc` template for a scope — a tempting "simplification" — would break the trust boundary (LLP 0006).
@@ -228,7 +228,16 @@ the queries and bounded results.

 The built-in source catalog covers Apple, Android, platform releases, Swift
 Evolution, SDWebImage, Media3, Glide, OkHttp, Kotlin coroutines, Gradle/AGP, selected JetBrains
-issues, Expo, React Native, Reanimated, Gesture Handler, Screens, and Worklets.
+issues, Expo, React, React Native, WHATWG and W3C web specifications, Chrome DevTools
+Protocol, Flow, TypeScript, the Android NDK, CMake, CocoaPods, Metro, Reanimated,
+Gesture Handler, Screens, and Worklets. The React Native
+additions cover the contracts its implementation must preserve: React semantics, its
+web-compatible APIs, the repository's type systems, and its native build and dependency
+managers. Hermes documentation is intentionally not fetched from the engine's `main`
+branch because it can disagree with React Native's vendored revision. Repository PR and
+issue history is intentionally not a
+live evidence provider: it belongs in a versioned offline evaluation corpus used to
+improve prompts, while the runtime MCP remains an API-contract channel.
 The canonical OkHttp host is backed by both the
 [maintainer's transfer announcement](https://jakewharton.com/the-lysine-contingency/)
 and [Commonhaus's project-transfer record](https://www.commonhaus.org/activity/315.html).
@@ -141,6 +141,94 @@ const cases = [
    title: "FlatList",
    body: "getItemLayout is an optional optimization for FlatList. It lets the list skip the measurement of dynamic content when the row height is known ahead of time.",
  },
+  {
+    label: "react",
+    provider: "react",
+    platform: "react-native",
+    providers: ["react"],
+    query: "useEffect dependency array",
+    expected: "react.dev/reference/react/useEffect",
+    url: "https://react.dev/reference/react/useEffect",
+    title: "useEffect",
+    body: "useEffect synchronizes a component with an external system. Every reactive value read by the effect belongs in its dependency array.",
+  },
+  {
+    label: "flow",
+    provider: "flow",
+    platform: "react-native",
+    providers: ["flow"],
+    query: "exact object types",
+    expected: "flow.org/en/docs/types/objects",
+    url: "https://flow.org/en/docs/types/objects/",
+    title: "Object Types",
+    body: "An exact object type rejects extra properties. Flow object types are exact by default unless they are explicitly declared inexact.",
+  },
+  {
+    label: "typescript",
+    provider: "typescript",
+    platform: "react-native",
+    providers: ["typescript"],
+    query: "declaration file module exports",
+    expected: "typescriptlang.org/docs/handbook/declaration-files",
+    url: "https://www.typescriptlang.org/docs/handbook/declaration-files/templates/module-d-ts.html",
+    title: "Modules .d.ts",
+    body: "A module declaration file describes the runtime exports of a JavaScript module. Its export shape must match the values consumers can import.",
+  },
+  {
+    label: "web-standards",
+    provider: "web-standards",
+    platform: "react-native",
+    providers: ["web-standards"],
+    sourceKind: "standard",
+    query: "AbortSignal fetch cancellation",
+    expected: "fetch.spec.whatwg.org",
+    url: "https://fetch.spec.whatwg.org/",
+    title: "Fetch Standard",
+    body: "An AbortSignal can abort a fetch operation. The fetch promise rejects when the request is terminated by the signal.",
+  },
+  {
+    label: "chrome-devtools-protocol",
+    provider: "chrome-devtools-protocol",
+    platform: "react-native",
+    providers: ["chrome-devtools-protocol"],
+    sourceKind: "standard",
+    query: "Runtime evaluate awaitPromise",
+    expected: "chromedevtools.github.io/devtools-protocol/tot/Runtime",
+    url: "https://chromedevtools.github.io/devtools-protocol/tot/Runtime/",
+    title: "Runtime domain",
+    body: "Runtime.evaluate evaluates an expression on the inspected page. The awaitPromise option waits for a returned promise and reports its resolved result.",
+  },
+  {
+    label: "android-ndk",
+    provider: "android-ndk",
+    providers: ["android-ndk"],
+    query: "JNIEnv local references",
+    expected: "developer.android.com/ndk/guides/jni-tips",
+    url: "https://developer.android.com/ndk/guides/jni-tips",
+    title: "JNI tips",
+    body: "JNI local references are valid only for the duration of the current native method call and on the current thread. Long-lived references must be promoted to global references.",
+  },
+  {
+    label: "cmake",
+    provider: "cmake",
+    providers: ["cmake"],
+    query: "target_link_libraries transitive",
+    expected: "cmake.org/cmake/help/latest/command/target_link_libraries",
+    url: "https://cmake.org/cmake/help/latest/command/target_link_libraries.html",
+    title: "target_link_libraries",
+    body: "target_link_libraries links a target to libraries and can publish transitive link dependencies through the target's interface.",
+  },
+  {
+    label: "cocoapods",
+    provider: "cocoapods",
+    platform: "apple",
+    providers: ["cocoapods"],
+    query: "Podfile use_frameworks linkage",
+    expected: "guides.cocoapods.org/syntax/podfile",
+    url: "https://guides.cocoapods.org/syntax/podfile.html",
+    title: "Podfile Syntax Reference",
+    body: "The use_frameworks directive configures pods to build as frameworks and accepts a linkage option for static or dynamic frameworks.",
+  },
  {
    label: "react-native-reanimated",
    provider: "react-native-reanimated",
@@ -270,6 +270,25 @@ test("checkProviderAuth: an entry for an IN-USE provider is still enforced", ()
  expect(r.detail).toContain("openai");
 });

+test("checkProviderAuth: Meta uses META_API_KEY and rejects cross-provider reuse", () => {
+  const meta = cfgWithModels(["meta/muse-spark-1.2"], {
+    mode: "api-key",
+    provider: "meta",
+    tokenEnv: "META_API_KEY",
+  });
+  expect(checkProviderAuth(meta, {}).detail).toContain("META_API_KEY");
+  expect(checkProviderAuth(meta, { META_API_KEY: "meta-review-key" }).ok).toBe(true);
+
+  const wrongOwner = cfgWithModels(["openai/gpt-5.5"], {
+    mode: "api-key",
+    provider: "openai",
+    tokenEnv: "META_API_KEY",
+  });
+  const result = checkProviderAuth(wrongOwner, { META_API_KEY: "meta-review-key" });
+  expect(result.ok).toBe(false);
+  expect(result.detail).toContain("meta's well-known credential env");
+});
+
 test("prepareAuth: does not forward a dead unused-provider api-key into its key env", async () => {
  // An entry for a provider no model uses must not have its tokenEnv copied into the
  // provider key env — checkProviderAuth skips its guard, so forwarding would
@@ -245,6 +245,9 @@ test("buildClaudeArgs: read-only, trust-isolated, subscription argv; never --bar
  );
  expect(joined).not.toContain(" Grep ");
  expect(joined).not.toContain(" Glob ");
+  // --tools loads only the granted read tools, so an ungranted built-in (a new one
+  // in a future CLI included) never reaches the model.
+  expect(args[args.indexOf("--tools") + 1]).toBe("Read,Grep,Glob");
  // Write/exec/net tools are denied outright; out-of-tree reads are denied by
  // dontAsk's unmatched-rule denial (NO explicit Read deny: `Read(~/**)` would
  // deny the whole tree whenever the repo lives under the home directory).
@@ -285,6 +288,52 @@ test("parseClaudeResult: success maps text/cost/tokens/model", () => {
  expect(r.structuredOutputFailure).toBe(false);
 });

+test("parseClaudeResult: records thinking tokens as reasoning, without inflating output", () => {
+  const stdout = JSON.stringify({
+    type: "result",
+    subtype: "success",
+    is_error: false,
+    result: "the findings",
+    total_cost_usd: 0.5,
+    usage: {
+      input_tokens: 10,
+      output_tokens: 200,
+      output_tokens_details: { thinking_tokens: 170 },
+      cache_creation_input_tokens: 0,
+      cache_read_input_tokens: 0,
+    },
+  });
+  const r = parseClaudeResult(stdout);
+  expect(r.tokens.reasoning).toBe(170);
+  expect(r.tokens.output).toBe(200);
+});
+
+test("parseClaudeResult: omits reasoning when the CLI reports no breakdown", () => {
+  const stdout = JSON.stringify({
+    type: "result",
+    subtype: "success",
+    is_error: false,
+    result: "the findings",
+    total_cost_usd: 0.5,
+    usage: { input_tokens: 10, output_tokens: 200 },
+  });
+  expect(parseClaudeResult(stdout).tokens.reasoning).toBeUndefined();
+});
+
+test("parseClaudeResult: survives a null/!object output_tokens_details", () => {
+  for (const details of [null, "nope", 7]) {
+    const stdout = JSON.stringify({
+      type: "result",
+      subtype: "success",
+      is_error: false,
+      result: "x",
+      total_cost_usd: 0,
+      usage: { input_tokens: 1, output_tokens: 2, output_tokens_details: details },
+    });
+    expect(parseClaudeResult(stdout).tokens.reasoning).toBeUndefined();
+  }
+});
+
 test("parseClaudeResult: reads the final result from stream-json JSONL", () => {
  const stdout = [
    JSON.stringify({ type: "system", subtype: "init", model: "claude-opus-5" }),
@@ -536,6 +585,7 @@ test("buildClaudeArgs: cross-cutting/verifier get Read+Grep scoped, Glob denied
  // withheld read tool must be denied BY NAME, not just left out of --allowedTools.
  expect(joined).toContain("--allowedTools Read(//work/repo/**) Grep(//work/repo/**)");
  expect(joined).not.toContain("Glob(/");
+  expect(args[args.indexOf("--tools") + 1]).toBe("Read,Grep");
  expect(joined).toContain(
    "--disallowedTools Glob Bash Edit Write NotebookEdit NotebookRead WebFetch WebSearch Task TodoWrite BashOutput KillShell ExitPlanMode",
  );
@@ -553,9 +603,9 @@ test("buildClaudeArgs: reviewer tools honor the configured read set (list ignore
    "--allowedTools Read(//work/repo/**) Grep(//work/repo/**) Glob(//work/repo/**)",
  );
  // `list` has no scoped Claude equivalent and is silently ignored (no crash, no rule).
-  expect(joined).not.toContain("List");
+  expect(args.some((arg) => arg.startsWith("List("))).toBe(false);
  expect(joined).toContain(
-    "--disallowedTools Bash Edit Write NotebookEdit NotebookRead WebFetch WebSearch Task TodoWrite BashOutput KillShell ExitPlanMode",
+    "--disallowedTools Bash Edit Write NotebookEdit NotebookRead WebFetch WebSearch Task TodoWrite BashOutput KillShell ExitPlanMode ListAgents",
  );
 });

@@ -570,6 +620,8 @@ test("buildClaudeArgs: empty tools (coordinator/no-tools fallback) deny every re
  // No --allowedTools at all, and Read/Grep/Glob explicitly denied so dontAsk's
  // default-allow can't grant a read.
  expect(joined).not.toContain("--allowedTools");
+  // An empty --tools value loads no built-in tool at all.
+  expect(args[args.indexOf("--tools") + 1]).toBe("");
  expect(joined).toContain(
    "--disallowedTools Read Grep Glob Bash Edit Write NotebookEdit NotebookRead WebFetch WebSearch Task TodoWrite BashOutput KillShell ExitPlanMode",
  );
@@ -597,6 +649,8 @@ test("buildClaudeArgs: explicit research MCP replaces safe mode without loading
  expect(joined).toContain("mcp__platform_docs__search_platform_docs");
  expect(joined).toContain("mcp__platform_docs__fetch_platform_doc");
  expect(joined).toContain("--mcp-config /private/mcp.json");
+  // MCP tools sit outside the built-in set, so --tools does not remove them.
+  expect(args[args.indexOf("--tools") + 1]).toBe("Read");
  expect(joined).toContain("--setting-sources  --disable-slash-commands");
  expect(joined).toContain("--strict-mcp-config");
  expect(joined).toContain("--no-session-persistence");
@@ -0,0 +1,46 @@
+import { describe, expect, test } from "bun:test";
+import { mkdir, mkdtemp, writeFile } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import path from "node:path";
+import {
+  CONFIG_DIRNAME,
+  LEGACY_CONFIG_DIRNAME,
+  configDirFor,
+  isConfigDirPath,
+  resolveConfigDir,
+} from "../config/load.js";
+
+describe("setup dir: .expo-agents/code-review with the legacy .expo-code-review fallback", () => {
+  test("a fresh repo resolves to the new name", async () => {
+    const root = await mkdtemp(path.join(tmpdir(), "ecr-dir-"));
+    expect(configDirFor(root)).toBe(path.join(root, CONFIG_DIRNAME));
+  });
+
+  test("a pre-0.15 repo keeps using .expo-code-review unchanged", async () => {
+    const root = await mkdtemp(path.join(tmpdir(), "ecr-dir-"));
+    await mkdir(path.join(root, LEGACY_CONFIG_DIRNAME), { recursive: true });
+    expect(configDirFor(root)).toBe(path.join(root, LEGACY_CONFIG_DIRNAME));
+    expect(resolveConfigDir(root)).toBe(path.join(root, LEGACY_CONFIG_DIRNAME));
+  });
+
+  test("when both exist the new name wins", async () => {
+    const root = await mkdtemp(path.join(tmpdir(), "ecr-dir-"));
+    await mkdir(path.join(root, LEGACY_CONFIG_DIRNAME), { recursive: true });
+    await mkdir(path.join(root, CONFIG_DIRNAME), { recursive: true });
+    await writeFile(path.join(root, CONFIG_DIRNAME, "config.jsonc"), "{}");
+    expect(configDirFor(root)).toBe(path.join(root, CONFIG_DIRNAME));
+  });
+
+  test("an explicit override still beats both", async () => {
+    const root = await mkdtemp(path.join(tmpdir(), "ecr-dir-"));
+    await mkdir(path.join(root, LEGACY_CONFIG_DIRNAME), { recursive: true });
+    expect(resolveConfigDir(root, "custom")).toBe(path.join(root, "custom"));
+  });
+
+  test("isConfigDirPath recognizes either spelling, nowhere else", () => {
+    expect(isConfigDirPath("/r/.expo-code-review")).toBe(true);
+    expect(isConfigDirPath("/r/apps/api/.expo-agents/code-review")).toBe(true);
+    expect(isConfigDirPath("/r/.expo-agents")).toBe(false);
+    expect(isConfigDirPath("/r/code-review")).toBe(false);
+  });
+});
@@ -503,7 +503,9 @@ test("setup problems are labelled by setup-dir position when the config lives ou
    setupDirs: [path.join(trustedBase, ".expo-code-review")],
  });
  expect(report.problems).toHaveLength(1);
-  expect(report.problems[0]!.file).toBe(path.join(".expo-code-review", "agents", "security.md"));
+  expect(report.problems[0]!.file).toBe(
+    path.join(".expo-agents", "code-review", "agents", "security.md"),
+  );
 });

 test("citedPathsTouchedBy reports cited paths a PR changed, dirs included", async () => {
@@ -50,6 +50,36 @@ test("run with input: timeout kills the child and resolves timedOut (no throw)",
  expect(Date.now() - started).toBeLessThan(10_000);
 });

+/**
+ * Wait until `pid` no longer names a LIVE process. `kill(pid, 0)` alone is racy
+ * here: it still succeeds while the killed grandchild is a zombie awaiting init's
+ * reap (the direct `sh` dies first, the orphaned `sleep` reparents, and reaping is
+ * asynchronous) — which is exactly what flaked on loaded CI runners. A zombie is
+ * dead for this test's purpose, so a `ps` state of `Z` (or no row) counts as gone.
+ * A process that genuinely survived the group kill (`sleep 30`) outlives the whole
+ * poll window and still fails the assertion.
+ */
+async function processGone(pid: number, timeoutMs = 5000): Promise<boolean> {
+  const started = Date.now();
+  for (;;) {
+    try {
+      process.kill(pid, 0);
+    } catch {
+      return true; // ESRCH: fully gone
+    }
+    const state = (
+      await run("ps", ["-o", "state=", "-p", String(pid)], { check: false })
+    ).stdout.trim();
+    if (state === "" || state.startsWith("Z")) {
+      return true; // reaped between the two checks, or dead-but-unreaped
+    }
+    if (Date.now() - started >= timeoutMs) {
+      return false;
+    }
+    await new Promise((resolve) => setTimeout(resolve, 50));
+  }
+}
+
 test("run with input: timeout kills the whole process group, not just the direct child", async () => {
  const dir = await mkdtemp(join(tmpdir(), "ecr-exec-test-"));
  const pidFile = join(dir, "grandchild.pid");
@@ -61,13 +91,14 @@ test("run with input: timeout kills the whole process group, not just the direct
    });
    expect(result.timedOut).toBe(true);
    const grandchildPid = Number((await readFile(pidFile, "utf8")).trim());
-    // If only the direct `sh` had been signaled, this detached grandchild `sleep`
-    // would still be alive; process.kill throws ESRCH once the whole group is gone.
-    expect(() => process.kill(grandchildPid, 0)).toThrow();
+    // If only the direct `sh` had been signaled, this grandchild `sleep 30` would
+    // still be alive well past the poll window; the group kill leaves it dead (or
+    // momentarily zombie) within milliseconds.
+    expect(await processGone(grandchildPid)).toBe(true);
  } finally {
    await rm(dir, { recursive: true, force: true });
  }
-});
+}, 10_000);

 test("run with input: escalates to SIGKILL after the grace period when the child traps SIGTERM", async () => {
  const started = Date.now();
@@ -0,0 +1,377 @@
+import { test, expect } from "bun:test";
+
+import {
+  activeFindings,
+  hasUnquotedMarker,
+  inlineBodiesEqual,
+  planInlineSync,
+} from "../reporters/github.js";
+import type { ExistingInlineComment } from "../reporters/github.js";
+import {
+  inlineCommentMarker,
+  inlineStubBody,
+  oneLineRationale,
+  parseInlineMarkerFp,
+  renderInlineCommentBody,
+  renderMarkdown,
+} from "../core/render.js";
+import type { LinkContext } from "../core/render.js";
+import { hasUnquotedInlineMarker, matchReplies, replyIsNewer } from "../core/responses.js";
+import type { ReplyComment } from "../core/responses.js";
+import { applyPins, fingerprintFinding } from "../core/schema.js";
+import type { CoordinatorOutput, FeedbackRecord, Finding } from "../core/schema.js";
+
+const finding = (over: Partial<Finding> = {}): Finding => ({
+  severity: "warning",
+  category: "quality",
+  file: "a.ts",
+  line: 5,
+  title: "Observer restarts for cached instances",
+  rationale: "getInstances() restarts the push token observer for cached instances.",
+  ...over,
+});
+
+const existing = (over: Partial<ExistingInlineComment> = {}): ExistingInlineComment => ({
+  id: 1,
+  fp: "aaaa11",
+  body: "old",
+  hasReplies: false,
+  ...over,
+});
+
+const TAG = "expo-ai-code-reviewer";
+
+// ---- marker format + anchored parse ----
+
+test("inline marker roundtrips through the anchored parser", () => {
+  const body = renderInlineCommentBody(finding(), TAG, "deadbeef11");
+  expect(body.startsWith(inlineCommentMarker(TAG, "deadbeef11"))).toBe(true);
+  expect(parseInlineMarkerFp(body, TAG)).toBe("deadbeef11");
+  expect(parseInlineMarkerFp(inlineStubBody(TAG, "deadbeef11"), TAG)).toBe("deadbeef11");
+});
+
+test("parseInlineMarkerFp: a marker anywhere but byte 0 parses to nothing", () => {
+  const forged = `prose first\n${inlineCommentMarker(TAG, "deadbeef11")}`;
+  expect(parseInlineMarkerFp(forged, TAG)).toBeNull();
+  // A quote-reply carrying the marker behind `> ` is not identity either.
+  expect(parseInlineMarkerFp(`> ${inlineCommentMarker(TAG, "deadbeef11")}`, TAG)).toBeNull();
+});
+
+test("parseInlineMarkerFp: constrains the fp to the fingerprint alphabet and the exact tag", () => {
+  expect(parseInlineMarkerFp(`<!-- ${TAG}:inline:fp=NOTHEX -->`, TAG)).toBeNull();
+  expect(parseInlineMarkerFp(`<!-- other-tag:inline:fp=deadbeef11 -->`, TAG)).toBeNull();
+  // A scoped tag never cross-parses under the root tag.
+  expect(parseInlineMarkerFp(`<!-- ${TAG}:scope:inline:fp=deadbeef11 -->`, TAG)).toBeNull();
+});
+
+// ---- inline body ----
+
+test("renderInlineCommentBody: id token, severity, rationale, suggestion, and no state markers", () => {
+  const body = renderInlineCommentBody(
+    finding({ suggestion: "cache it", rationale: "watch <!-- evil --> out" }),
+    TAG,
+    "deadbeef11",
+  );
+  expect(body).toContain("`id:deadbeef11`");
+  expect(body).toContain("🟡 Warning");
+  expect(body).toContain("**Suggestion:** cache it");
+  // Untrusted text can never smuggle a raw HTML comment opener into our body.
+  expect(body).toContain("&lt;!-- evil -->");
+  expect(body).not.toMatch(/:(?:state|fingerprints)=/);
+});
+
+test("inlineStubBody: neutral — never claims resolved or dismissed", () => {
+  const stub = inlineStubBody(TAG, "deadbeef11");
+  expect(stub.toLowerCase()).not.toContain("resolved");
+  expect(stub.toLowerCase()).not.toContain("dismissed");
+  expect(stub).toContain("main review comment");
+});
+
+// ---- oneLineRationale ----
+
+test("oneLineRationale: strips HTML tags, collapses whitespace, escapes <, truncates at a word boundary", () => {
+  expect(oneLineRationale("a\n\nb   c")).toBe("a b c");
+  expect(oneLineRationale("<details>x</details>")).toBe("x");
+  expect(oneLineRationale("High — reason.<br>**Impact:** Medium<BR/>end")).toBe(
+    "High — reason. **Impact:** Medium end",
+  );
+  expect(oneLineRationale("<details><summary>Why</summary>\n\nbody</details>")).toBe("Why body");
+  // Non-formatting angle brackets stay, escaped.
+  expect(oneLineRationale("returns `Promise<void>` when a < b")).toBe(
+    "returns `Promise&lt;void>` when a &lt; b",
+  );
+  const long = Array.from({ length: 60 }, (_, i) => `word${i}`).join(" ");
+  const short = oneLineRationale(long);
+  expect(short.length).toBeLessThanOrEqual(161);
+  expect(short.endsWith("…")).toBe(true);
+  // Cut lands on a word boundary: the kept prefix is followed by a space in the input.
+  const kept = short.slice(0, -1);
+  expect(long.startsWith(kept)).toBe(true);
+  expect(long[kept.length]).toBe(" ");
+});
+
+// ---- planner ----
+
+test("planInlineSync: creates new, patches live, stubs replied stale, deletes bare stale", () => {
+  const target = { fp: "aaaa11", finding: finding() };
+  const plan = planInlineSync({
+    targets: [target, { fp: "bbbb22", finding: finding({ file: "b.ts" }) }],
+    existing: [
+      existing({ id: 10, fp: "aaaa11" }),
+      existing({ id: 11, fp: "gone01", hasReplies: true }),
+      existing({ id: 12, fp: "gone02", hasReplies: false }),
+    ],
+    maxComments: 20,
+    teardown: true,
+  });
+  expect(plan.patch.map((p) => p.comment.fp)).toEqual(["aaaa11"]);
+  expect(plan.create.map((c) => c.fp)).toEqual(["bbbb22"]);
+  expect(plan.stub.map((s) => s.fp)).toEqual(["gone01"]);
+  expect(plan.remove.map((r) => r.fp)).toEqual(["gone02"]);
+});
+
+test("planInlineSync: teardown=false is additive-only, but still removes duplicates of a kept fp", () => {
+  const plan = planInlineSync({
+    targets: [{ fp: "aaaa11", finding: finding() }],
+    existing: [
+      existing({ id: 10, fp: "aaaa11" }),
+      existing({ id: 9, fp: "aaaa11" }), // older duplicate (crash window)
+      existing({ id: 11, fp: "gone01" }),
+      existing({ id: 12, fp: "gone02", hasReplies: true }),
+    ],
+    maxComments: 20,
+    teardown: false,
+  });
+  expect(plan.stub).toEqual([]);
+  expect(plan.remove.map((r) => r.id)).toEqual([9]); // duplicate only, never live stale threads
+  expect(plan.patch.map((p) => p.comment.id)).toEqual([10]); // newest duplicate is the live one
+});
+
+test("planInlineSync: the cap is sticky — a live thread is never evicted for a new finding", () => {
+  const critical = { fp: "cccc33", finding: finding({ severity: "critical", file: "c.ts" }) };
+  const existingWarning = { fp: "aaaa11", finding: finding() };
+  const plan = planInlineSync({
+    targets: [critical, existingWarning],
+    existing: [existing({ id: 10, fp: "aaaa11", hasReplies: true })],
+    maxComments: 1,
+    teardown: true,
+  });
+  // The warning already has a live thread; the (higher-severity) newcomer waits.
+  expect(plan.patch.map((p) => p.comment.fp)).toEqual(["aaaa11"]);
+  expect(plan.create).toEqual([]);
+  expect(plan.stub).toEqual([]);
+});
+
+test("planInlineSync: severity then fp orders admissions deterministically", () => {
+  const plan = planInlineSync({
+    targets: [
+      { fp: "bbbb22", finding: finding({ file: "b.ts" }) },
+      { fp: "aaaa11", finding: finding() },
+      { fp: "cccc33", finding: finding({ severity: "critical", file: "c.ts" }) },
+    ],
+    existing: [],
+    maxComments: 2,
+    teardown: true,
+  });
+  expect(plan.create.map((c) => c.fp)).toEqual(["cccc33", "aaaa11"]);
+});
+
+// ---- body compare + marker scan ----
+
+test("inlineBodiesEqual is CRLF-insensitive (the API returns CRLF bodies)", () => {
+  expect(inlineBodiesEqual("a\r\nb", "a\nb")).toBe(true);
+  expect(inlineBodiesEqual("a\nb", "a\nc")).toBe(false);
+});
+
+test("hasUnquotedMarker: quoted copies do not count", () => {
+  const marker = inlineCommentMarker(TAG, "deadbeef11");
+  expect(hasUnquotedMarker(`${marker}\nbody`, marker)).toBe(true);
+  expect(hasUnquotedMarker(`> ${marker}\nmy actual reply`, marker)).toBe(false);
+});
+
+// ---- reply-matcher backstop ----
+
+test("hasUnquotedInlineMarker: tag-independent, unquoted lines only", () => {
+  expect(hasUnquotedInlineMarker(renderInlineCommentBody(finding(), "any-tag", "abcdef"))).toBe(
+    true,
+  );
+  expect(hasUnquotedInlineMarker(`> <!-- any-tag:inline:fp=abcdef -->\nreal reply`)).toBe(false);
+});
+
+test("matchReplies: our inline body is never matched as a reply, even with a maintainer login", () => {
+  const f = finding();
+  const fp = fingerprintFinding(f);
+  const body = renderInlineCommentBody(f, "some-other-tag", fp); // carries an unquoted id: token
+  const records = matchReplies(
+    [{ id: 5, body, login: "bot", maintainer: true }],
+    [{ finding: f, fp }],
+    {
+      match: "both",
+    },
+  );
+  expect(records).toEqual([]);
+});
+
+test("matchReplies: a quote-reply of an inline comment still matches", () => {
+  const f = finding();
+  const fp = fingerprintFinding(f);
+  const quoted = renderInlineCommentBody(f, TAG, fp)
+    .split("\n")
+    .map((line) => `> ${line}`)
+    .join("\n");
+  const records = matchReplies(
+    [{ id: 5, body: `${quoted}\n\nThis is intentional.`, login: "author", maintainer: false }],
+    [{ finding: f, fp }],
+    { match: "both" },
+  );
+  expect(records.map((r) => r.fp)).toEqual([fp]);
+  expect(records[0]!.citedId).toBe(false); // a quoted id never counts as citing
+});
+
+// ---- threadFp ----
+
+test("matchReplies: threadFp matches in every match mode and never sets citedId", () => {
+  const f = finding();
+  const fp = fingerprintFinding(f);
+  for (const match of ["quote", "id", "both"] as const) {
+    const records = matchReplies(
+      [
+        {
+          id: -50,
+          body: "we cache these on purpose",
+          login: "author",
+          maintainer: false,
+          threadFp: fp,
+        },
+      ],
+      [{ finding: f, fp }],
+      { match },
+    );
+    expect(records.map((r) => r.fp)).toEqual([fp]);
+    expect(records[0]!.citedId).toBe(false);
+    expect(records[0]!.commentId).toBe(-50);
+  }
+});
+
+test("matchReplies: an unknown threadFp matches nothing", () => {
+  const f = finding();
+  const records = matchReplies(
+    [{ id: -50, body: "x", login: "author", maintainer: false, threadFp: "ffffff" }],
+    [{ finding: f, fp: fingerprintFinding(f) }],
+    { match: "both" },
+  );
+  expect(records).toEqual([]);
+});
+
+// ---- cross-stream ids ----
+
+test("replyIsNewer: magnitude within a stream, issue comments win across streams", () => {
+  expect(replyIsNewer(200, 100)).toBe(true); // issue: newer wins
+  expect(replyIsNewer(-200, -100)).toBe(true); // inline: raw 200 is newer than raw 100
+  expect(replyIsNewer(-100, -200)).toBe(false);
+  expect(replyIsNewer(100, -999)).toBe(true); // cross-stream: issue comment wins
+  expect(replyIsNewer(-999, 100)).toBe(false);
+});
+
+test("matchReplies: the newer inline reply wins within the inline stream", () => {
+  const f = finding();
+  const fp = fingerprintFinding(f);
+  const mk = (id: number, login: string): ReplyComment => ({
+    id,
+    body: "",
+    login,
+    maintainer: false,
+    threadFp: fp,
+  });
+  const records = matchReplies([mk(-100, "older"), mk(-200, "newer")], [{ finding: f, fp }], {
+    match: "both",
+  });
+  expect(records[0]!.by).toBe("newer");
+});
+
+test("applyPins: a cross-stream 'newer' maintainer reply never lifts a pin; same-stream magnitude does", () => {
+  const record = (commentId: number): FeedbackRecord => ({
+    fp: "aaaa11",
+    by: "m",
+    commentId,
+    maintainer: true,
+    citedId: true,
+    applied: false,
+  });
+  // Pin taken against an inline reply (negative id): an issue reply cannot lift it.
+  expect(applyPins([record(999)], [{ fp: "aaaa11", commentId: -100 }]).pins).toHaveLength(1);
+  // A NEWER inline maintainer reply (raw 200 > raw 100) lifts it.
+  expect(applyPins([record(-200)], [{ fp: "aaaa11", commentId: -100 }]).pins).toHaveLength(0);
+  // An OLDER inline reply does not.
+  expect(applyPins([record(-50)], [{ fp: "aaaa11", commentId: -100 }]).pins).toHaveLength(1);
+});
+
+// ---- activeFindings ----
+
+test("activeFindings: drops dismissed, reply-cleared, and requalified findings", () => {
+  const keep = { finding: finding(), fp: "keep01" };
+  const dismissed = { finding: finding({ file: "b.ts" }), fp: "gone01" };
+  const cleared = { finding: finding({ file: "c.ts" }), fp: "gone02" };
+  const requalified = {
+    finding: finding({ file: "d.ts", requalifiedBy: { prNumber: 2, file: "x", reason: "r" } }),
+    fp: "gone03",
+  };
+  const record: FeedbackRecord = {
+    fp: "gone02",
+    by: "author",
+    commentId: 5,
+    maintainer: false,
+    applied: true,
+  };
+  const active = activeFindings(
+    [keep, dismissed, cleared, requalified],
+    [{ fp: "gone01" }],
+    [record],
+  );
+  expect(active.map((entry) => entry.fp)).toEqual(["keep01"]);
+});
+
+// ---- short form ----
+
+test("renderMarkdown: an inlined finding renders short with the thread link; others render full", () => {
+  const inlined = finding({ suggestion: "cache the observer" });
+  const other = finding({ file: "b.ts", title: "Other finding", suggestion: "do the thing" });
+  const review: CoordinatorOutput = {
+    decision: "approve_with_comments",
+    findings: [inlined, other],
+    summary: "s",
+    incomplete: [],
+  };
+  const link: LinkContext = {
+    repo: "o/r",
+    prNumber: 1,
+    inlineUrls: new Map([
+      [fingerprintFinding(inlined), "https://github.com/o/r/pull/1#discussion_r123"],
+    ]),
+  };
+  const body = renderMarkdown(review, TAG, [], link);
+  expect(body).toContain("[inline comment](https://github.com/o/r/pull/1#discussion_r123)");
+  // Short form: the one-line rationale survives, the suggestion moves inline-only.
+  expect(body).toContain("getInstances() restarts the push token observer");
+  expect(body).not.toContain("cache the observer");
+  // The non-inlined finding keeps its full form.
+  expect(body).toContain("**Suggestion:** do the thing");
+});
+
+test("renderMarkdown: a non-github inline URL is ignored (full form)", () => {
+  const f = finding({ suggestion: "s1" });
+  const review: CoordinatorOutput = {
+    decision: "approve_with_comments",
+    findings: [f],
+    summary: "s",
+    incomplete: [],
+  };
+  const link: LinkContext = {
+    repo: "o/r",
+    prNumber: 1,
+    inlineUrls: new Map([[fingerprintFinding(f), "https://evil.example/x"]]),
+  };
+  const body = renderMarkdown(review, TAG, [], link);
+  expect(body).not.toContain("evil.example");
+  expect(body).toContain("**Suggestion:** s1");
+});
@@ -13,6 +13,7 @@ import {
  resolveEngineDispatch,
  resolveOpencodeCli,
  STACK_VERIFIER_AGENT,
+  META_MODEL_API_BASE_URL,
 } from "../core/opencode.js";
 import type { OpencodeHandle } from "../core/opencode.js";
 import type { ClaudeCodeHandle } from "../core/claude-code.js";
@@ -341,6 +342,94 @@ test("an upstream-alias auth entry synthesizes a provider block with exactly the
  expect(opencode.provider?.openai).toBeUndefined();
 });

+test("Meta auth synthesizes the public Muse 1.3 Responses provider without embedding its key", () => {
+  const config = configWith({
+    agents: [{ id: "correctness", model: "meta/muse-spark-1.3" }],
+    coordinatorModel: "meta/muse-spark-1.3-contributor",
+    auth: [{ mode: "api-key", provider: "meta", tokenEnv: "META_API_KEY" }],
+  });
+  const opencode = buildOpencodeConfig(config) as {
+    provider?: Record<
+      string,
+      {
+        npm: string;
+        options: { baseURL: string; apiKey: string };
+        models: Record<
+          string,
+          {
+            reasoning?: boolean;
+            limit?: { context: number; output: number };
+            options?: Record<string, unknown>;
+          }
+        >;
+      }
+    >;
+  };
+  const meta = opencode.provider?.meta;
+  expect(meta).toBeDefined();
+  expect(meta!.npm).toBe("@ai-sdk/openai");
+  expect(meta!.options).toEqual({
+    baseURL: META_MODEL_API_BASE_URL,
+    apiKey: "{env:META_API_KEY}",
+  });
+  expect(Object.keys(meta!.models)).toEqual(["muse-spark-1.3", "muse-spark-1.3-contributor"]);
+  expect(meta!.models["muse-spark-1.3"]?.reasoning).toBe(true);
+  expect(meta!.models["muse-spark-1.3"]?.limit).toEqual({
+    context: 1_048_576,
+    output: 1_048_576,
+  });
+  expect(meta!.models["muse-spark-1.3"]?.options).toMatchObject({
+    reasoningEffort: "high",
+    include: ["reasoning.encrypted_content"],
+  });
+  expect(meta!.models["muse-spark-1.3-contributor"]?.reasoning).toBe(true);
+});
+
+test("a Meta-named upstream alias does not redirect the upstream credential to Meta", () => {
+  const config = configWith({
+    agents: [{ id: "correctness", model: "meta/muse-spark-1.2" }],
+    coordinatorModel: "meta/muse-spark-1.2",
+    auth: [
+      {
+        mode: "api-key",
+        provider: "meta",
+        tokenEnv: "CLAUDE_CODE_REVIEW_SHARED_API_TOKEN",
+        upstream: "anthropic",
+      },
+    ],
+  });
+  const opencode = buildOpencodeConfig(config) as {
+    provider?: Record<
+      string,
+      { npm: string; options: { apiKey: string; baseURL?: string }; models: object }
+    >;
+  };
+  const alias = opencode.provider?.meta;
+  expect(alias).toBeDefined();
+  expect(alias!.npm).toBe("@ai-sdk/anthropic");
+  expect(alias!.options).toEqual({ apiKey: "{env:CLAUDE_CODE_REVIEW_SHARED_API_TOKEN}" });
+  expect(alias!.options.baseURL).toBeUndefined();
+  expect(Object.keys(alias!.models)).toEqual(["muse-spark-1.2"]);
+});
+
+test("Meta provider registers future model families neutrally and only for the meta prefix", () => {
+  const config = configWith({
+    agents: [
+      { id: "correctness", model: "meta/muse-foo" },
+      { id: "security", model: "openai/muse-foo" },
+    ],
+    coordinatorModel: "meta/a-future-family-2",
+    auth: [{ mode: "api-key", provider: "meta", tokenEnv: "META_API_KEY" }],
+  });
+  const opencode = buildOpencodeConfig(config) as {
+    provider?: Record<string, { models: Record<string, unknown> }>;
+  };
+  expect(opencode.provider?.meta?.models).toEqual({
+    "muse-foo": {},
+    "a-future-family-2": {},
+  });
+});
+
 test("buildOpencodeConfig registers the no-tools stack verifier (empty tool list)", () => {
  const opencode = buildOpencodeConfig(configWith({})) as {
    agent: Record<string, { tools: Record<string, boolean> }>;
@@ -61,7 +61,7 @@ test("aggregate: root marker first line, a table row + <details> per scope, wors
  expect(body.split("\n")[0]).toBe(commentMarker("tag"));
  expect(body).toContain("**Decision:** Request changes"); // worst across scopes
  expect(body).toContain("| Scope | Decision | Findings |");
-  expect(body).toContain("| default | Approve | 1 |");
+  expect(body).toContain("| default | Ready for human review | 1 |");
  expect(body).toContain("| api | Request changes | 1 |");
  // one details block per scope, in manifest order
  expect(body.indexOf("<summary>default")).toBeLessThan(body.indexOf("<summary>api"));
@@ -141,7 +141,7 @@ test("aggregate: a default-scope finding dismissed pre-routing (plain fp) lands
  ]);
  expect(body).toContain("Dismissed on this PR (1)");
  expect(body).toContain(`id:${plainFp}`);
-  expect(body).toContain("| default | Approve | 0 |"); // moved out of the active count
+  expect(body).toContain("| default | Ready for human review | 0 |"); // moved out of the active count
 });

 test("aggregate: dismissed findings survive in embedded state so /undismiss can restore them", () => {
@@ -162,7 +162,7 @@ test("aggregate: dismissed findings survive in embedded state so /undismiss can
  // (what /undismiss does) restores the finding to the active list.
  const restored = renderAggregateMarkdown(state.scopes!, "tag", []);
  expect(restored).toContain(`id:${fp}`);
-  expect(restored).toContain("| api | Approve | 2 |");
+  expect(restored).toContain("| api | Ready for human review | 2 |");
  expect(restored).not.toContain("Dismissed on this PR");
 });

@@ -220,7 +220,7 @@ test("aggregate: a scope whose reply cleared every finding opens its fold (visib
    ],
  );
  // The finding is suppressed (moved to Dismissed); the scope shows no active finding.
-  expect(body).toContain("<summary>api — Approve (0)</summary>");
+  expect(body).toContain("<summary>api — Ready for human review (0)</summary>");
  // ...but the fold OPENS so the audit note is above-the-fold, not collapsed away.
  expect(body).toMatch(/<details open>\n<summary>api —/);
  expect(body).toContain("have an author response");
@@ -221,4 +221,16 @@ test("direct URL inference prefers narrow release and dependency providers", ()
      "https://developer.android.com/reference/androidx/media3/common/Player",
    ).provider,
  ).toBe("media3");
+  expect(
+    resolveDirectDocumentationTarget("https://developer.android.com/ndk/guides/cpp-support"),
+  ).toMatchObject({ provider: "android-ndk", sourceKind: "official-guide" });
+  expect(resolveDirectDocumentationTarget("https://fetch.spec.whatwg.org/")).toMatchObject({
+    provider: "web-standards",
+    sourceKind: "standard",
+  });
+  expect(
+    resolveDirectDocumentationTarget(
+      "https://chromedevtools.github.io/devtools-protocol/tot/Runtime/",
+    ),
+  ).toMatchObject({ provider: "chrome-devtools-protocol", sourceKind: "standard" });
 });
@@ -39,12 +39,18 @@ test("stdio MCP advertises the read-only documentation tools and their enforced
    );
    expect(searchTool?.description ?? "").toContain("Native source retains platform context");
    expect(searchTool?.description ?? "").toContain("react-native-worklets=Worklets");
+    expect(searchTool?.description ?? "").toContain("metro=Metro bundler");
+    expect(searchTool?.description ?? "").toContain(
+      "web-standards=WHATWG and W3C web platform standards",
+    );
+    expect(searchTool?.description ?? "").toContain("android-ndk=Android NDK");
    expect(fetchTool?.annotations?.readOnlyHint).toBe(true);
    expect(fetchTool?.description ?? "").toMatch(/every redirect/);
    const inputSchema = searchTool?.inputSchema as {
      properties?: {
        query?: { description?: string };
-        providers?: { description?: string };
+        providers?: { description?: string; items?: { enum?: string[] } };
+        sourceKinds?: { description?: string; items?: { enum?: string[] } };
      };
    };
    const fetchInputSchema = fetchTool?.inputSchema as {
@@ -59,6 +65,12 @@ test("stdio MCP advertises the read-only documentation tools and their enforced
    expect(inputSchema.properties?.providers?.description ?? "").toContain(
      "jetbrains-issues=JetBrains YouTrack context",
    );
+    expect(inputSchema.properties?.providers?.items?.enum).toContain("typescript");
+    expect(inputSchema.properties?.providers?.items?.enum).toContain("chrome-devtools-protocol");
+    expect(inputSchema.properties?.sourceKinds?.items?.enum).toContain("standard");
+    expect(inputSchema.properties?.sourceKinds?.description ?? "").toContain(
+      "external compatibility specification",
+    );
    expect(fetchInputSchema.properties?.context?.default).toBe("section");
    expect(fetchInputSchema.properties?.context?.description ?? "").toContain(
      "document=bounded extracted page text",
@@ -1,22 +1,31 @@
 import { expect, test } from "bun:test";

 import {
+  androidNdkProvider,
  androidProvider,
  appleProvider,
  appleReleasesProvider,
+  chromeDevtoolsProtocolProvider,
+  cmakeProvider,
+  cocoaPodsProvider,
  expoProvider,
+  flowProvider,
  glideProvider,
  jetbrainsIssuesProvider,
+  metroProvider,
  okHttpProvider,
  reactNativeGestureHandlerProvider,
  reactNativeProvider,
  reactNativeReanimatedProvider,
  reactNativeScreensProvider,
  reactNativeWorkletsProvider,
+  reactProvider,
  resolveAllowedUrl,
  resolveAllowedRequestUrl,
  sdWebImageProvider,
  swiftEvolutionProvider,
+  typescriptProvider,
+  webStandardsProvider,
 } from "../../research-mcp/providers.js";

 test("Apple provider accepts only HTTPS documentation paths on the exact host", () => {
@@ -180,6 +189,7 @@ test("React Native ecosystem providers stay on their exact documentation hosts a
      reactNativeWorkletsProvider,
      "https://docs.swmansion.com/react-native-worklets/docs/fundamentals/getting-started/",
    ],
+    [metroProvider, "https://metrobundler.dev/docs/configuration"],
  ] as const) {
    expect(resolveAllowedUrl(provider, url).hostname).toBe(new URL(url).hostname);
  }
@@ -193,4 +203,53 @@ test("React Native ecosystem providers stay on their exact documentation hosts a
  expect(() => resolveAllowedUrl(expoProvider, "https://expo.dev/accounts")).toThrow(
    /outside the expo documentation allowlist/,
  );
+  expect(() =>
+    resolveAllowedUrl(metroProvider, "https://metrobundler.dev.evil.example/docs/configuration"),
+  ).toThrow(/outside the metro documentation allowlist/);
+});
+
+test("React Native contract providers admit only their fixed authoritative corpora", () => {
+  for (const [provider, url] of [
+    [reactProvider, "https://react.dev/reference/react/useEffect"],
+    [flowProvider, "https://flow.org/en/docs/types/unions/"],
+    [typescriptProvider, "https://www.typescriptlang.org/docs/handbook/declaration-files/"],
+    [androidNdkProvider, "https://developer.android.com/ndk/guides/cpp-support"],
+    [cmakeProvider, "https://cmake.org/cmake/help/v3.31/command/add_library.html"],
+    [cocoaPodsProvider, "https://guides.cocoapods.org/syntax/podfile.html"],
+    [webStandardsProvider, "https://fetch.spec.whatwg.org/"],
+    [webStandardsProvider, "https://w3c.github.io/IntersectionObserver/"],
+    [
+      chromeDevtoolsProtocolProvider,
+      "https://chromedevtools.github.io/devtools-protocol/tot/Runtime/",
+    ],
+  ] as const) {
+    expect(resolveAllowedUrl(provider, url).hostname).toBe(new URL(url).hostname);
+  }
+
+  for (const [provider, url] of [
+    [reactProvider, "https://react.dev/reference/react-dom/components/form"],
+    [reactProvider, "https://react.dev/learn/escape-hatches"],
+    [flowProvider, "https://flow.org/blog/"],
+    [typescriptProvider, "https://www.typescriptlang.org/play"],
+    [androidNdkProvider, "https://developer.android.com/studio/projects/install-ndk"],
+    [cmakeProvider, "https://cmake.org/community/"],
+    [cocoaPodsProvider, "https://guides.cocoapods.org/blog/"],
+    [webStandardsProvider, "https://w3c.github.io/permissions/"],
+    [webStandardsProvider, "https://whatwg.org/"],
+    [chromeDevtoolsProtocolProvider, "https://chromedevtools.github.io/debugger-protocol-viewer/"],
+  ] as const) {
+    expect(() => resolveAllowedUrl(provider, url)).toThrow(
+      /outside the .* documentation allowlist/,
+    );
+  }
+
+  expect(() =>
+    resolveAllowedUrl(webStandardsProvider, "https://user:[email protected]/"),
+  ).toThrow(/outside the web-standards documentation allowlist/);
+  expect(() =>
+    resolveAllowedUrl(androidNdkProvider, "https://developer.android.com.evil.example/ndk/guides"),
+  ).toThrow(/outside the android-ndk documentation allowlist/);
+  expect(() =>
+    resolveAllowedUrl(reactNativeProvider, "https://reactnative.dev/contributing/overview"),
+  ).toThrow(/outside the react-native documentation allowlist/);
 });
@@ -299,3 +299,67 @@ test("Apple release searches select the platform-specific fixed scope", async ()
  expect(queries[0]).toContain("site:developer.apple.com/documentation/xcode-release-notes");
  expect(queries[1]).toContain("site:developer.apple.com/documentation/ios-ipados-release-notes");
 });
+
+test("web standards discovery uses fixed WHATWG and W3C scopes with standards provenance", async () => {
+  let searchRequests = 0;
+  const fetchImplementation = async (input: string | URL | Request): Promise<Response> => {
+    const url = new URL(input instanceof Request ? input.url : input.toString());
+    if (url.hostname === "api.search.brave.com") {
+      searchRequests++;
+      const query = url.searchParams.get("q") ?? "";
+      expect(query).toContain("site:whatwg.org");
+      expect(query).toContain("site:w3c.github.io");
+      return jsonResponse({
+        web: {
+          results: [
+            { title: "Fetch Standard", url: "https://fetch.spec.whatwg.org/" },
+            { title: "Unrelated W3C draft", url: "https://w3c.github.io/permissions/" },
+          ],
+        },
+      });
+    }
+    expect(url.href).toBe("https://fetch.spec.whatwg.org/");
+    return new Response(
+      "<!doctype html><html><head><title>Fetch Standard</title></head><body><main>" +
+        "<h1>Fetch</h1><p>The AbortSignal controls cancellation of a fetch request and " +
+        "causes the fetch promise to reject when the operation is terminated.</p>" +
+        "</main></body></html>",
+      { headers: { "content-type": "text/html; charset=utf-8" } },
+    );
+  };
+
+  const response = await searchRemoteDocumentation(
+    "web-standards",
+    "AbortSignal fetch cancellation",
+    2,
+    { apiKey: "test-key", fetchImplementation, sourceKinds: ["standard"] },
+  );
+
+  expect(searchRequests).toBe(1);
+  expect(response.warnings).toEqual([]);
+  expect(response.results).toHaveLength(1);
+  expect(response.results[0]).toMatchObject({
+    provider: "web-standards",
+    sourceKind: "standard",
+    url: "https://fetch.spec.whatwg.org/",
+  });
+});
+
+test("provenance filtering skips a standards provider before network access", async () => {
+  let requests = 0;
+  const response = await searchRemoteDocumentation(
+    "chrome-devtools-protocol",
+    "Runtime evaluate",
+    1,
+    {
+      apiKey: "test-key",
+      sourceKinds: ["official-api"],
+      fetchImplementation: async () => {
+        requests++;
+        return jsonResponse({ web: { results: [] } });
+      },
+    },
+  );
+  expect(requests).toBe(0);
+  expect(response).toEqual({ results: [], warnings: [] });
+});
@@ -149,6 +149,40 @@ test("search filters named corpora and provenance classes", () => {
  ]);
 });

+test("search filters external standards separately from implementation documentation", () => {
+  const index = buildSearchIndex([
+    {
+      id: "standard:fetch",
+      platform: "react-native",
+      provider: "web-standards",
+      sourceKind: "standard",
+      title: "Fetch Standard",
+      url: "https://fetch.spec.whatwg.org/",
+      passage: "AbortSignal controls cancellation of a fetch request.",
+      indexedAt: "2026-08-06T00:00:00.000Z",
+    },
+    {
+      id: "rn:fetch",
+      platform: "react-native",
+      provider: "react-native",
+      sourceKind: "official-api",
+      title: "React Native global fetch",
+      url: "https://reactnative.dev/docs/global-fetch",
+      passage: "React Native exposes fetch as a global API.",
+      indexedAt: "2026-08-06T00:00:00.000Z",
+    },
+  ]);
+
+  const results = searchDocumentation(index, "fetch AbortSignal", {
+    platform: "react-native",
+    sourceKinds: ["standard"],
+    limit: 5,
+  });
+  expect(results.map(({ provider, sourceKind }) => ({ provider, sourceKind }))).toEqual([
+    { provider: "web-standards", sourceKind: "standard" },
+  ]);
+});
+
 test("a language filter excludes otherwise matching untagged documents", () => {
  const index = buildSearchIndex([
    ...chunks,
@@ -52,6 +52,7 @@ test("the wrapper hands the MCP server a constructed environment, not an inherit
          PATH: process.env.PATH ?? "",
          HOME: "/root",
          ANTHROPIC_API_KEY: "must-not-reach-the-server",
+          META_API_KEY: "must-not-reach-the-server",
          CLAUDE_CODE_OAUTH_TOKEN: "must-not-reach-the-server",
          AWS_SECRET_ACCESS_KEY: "must-not-reach-the-server",
          GITHUB_TOKEN: "must-not-reach-the-server",
@@ -93,6 +94,7 @@ test("research child environment forwards only locale, proxy variables, and the
      no_proxy: "localhost",
      BRAVE_SEARCH_API_KEY: "search-only",
      SECRET_TOKEN: "must-not-be-forwarded",
+      META_API_KEY: "must-not-be-forwarded",
      PATH: "/private/bin",
    }),
  ).toMatchObject({
@@ -103,6 +105,7 @@ test("research child environment forwards only locale, proxy variables, and the
    BRAVE_SEARCH_API_KEY: "search-only",
  });
  expect(researchChildEnvironment({ SECRET_TOKEN: "nope" })).not.toHaveProperty("SECRET_TOKEN");
+  expect(researchChildEnvironment({ META_API_KEY: "nope" })).not.toHaveProperty("META_API_KEY");
  expect(researchChildEnvironment({ PATH: "/private/bin" })).not.toHaveProperty("PATH");
 });

@@ -4,7 +4,12 @@ import { tmpdir } from "node:os";
 import path from "node:path";

 import type { LoadedConfig } from "../config/schema.js";
-import { reviewCanBeReused, reviewInputHash, reviewMatchesInput } from "../core/review-cache.js";
+import {
+  reviewCacheAllowed,
+  reviewCanBeReused,
+  reviewInputHash,
+  reviewMatchesInput,
+} from "../core/review-cache.js";
 import type { CoordinatorOutput, DiffEntry } from "../core/schema.js";

 const config = (over: Partial<LoadedConfig> = {}): LoadedConfig => ({
@@ -171,3 +176,25 @@ test("file hashing refuses traversal and never follows a PR-controlled symlink",
    await rm(outside, { force: true });
  }
 });
+
+test("reviewCacheAllowed is the one policy both CI paths share", () => {
+  const base = {
+    bypassTriggerGate: false,
+    stack: false,
+    feedback: false,
+    hasMetadata: true,
+  };
+  expect(reviewCacheAllowed(base)).toBe(true);
+
+  // Each flag independently means "this run has an input the key can't represent".
+  expect(reviewCacheAllowed({ ...base, bypassTriggerGate: true })).toBe(false);
+  expect(reviewCacheAllowed({ ...base, stack: true })).toBe(false);
+  expect(reviewCacheAllowed({ ...base, feedback: true })).toBe(false);
+  expect(reviewCacheAllowed({ ...base, hasMetadata: false })).toBe(false);
+
+  // Research is deliberately NOT a gate. It was one only because the offline index
+  // was an artifact the key could not represent; with the index gone, a researched
+  // review fetches everything live during the run. The routed path kept this gate
+  // after the legacy path dropped it, which is the drift this function prevents.
+  expect(reviewCacheAllowed(base)).toBe(true);
+});
@@ -14,6 +14,14 @@ test("plan: the mixed setup needs one ChatGPT login and one manual key", () => {
  expect(plan.unsupported).toEqual([]);
 });

+test("plan: Meta Model API is a manual API key setup", () => {
+  const plan = planFromAuth([{ provider: "meta", mode: "api-key", tokenEnv: "META_API_KEY" }]);
+  expect(plan.manualKeys).toEqual([
+    { provider: "meta", tokenEnv: "META_API_KEY", upstream: undefined },
+  ]);
+  expect(plan.unsupported).toEqual([]);
+});
+
 test("plan: an anthropic entry (any mode) → claudeLogin; api-key without tokenEnv needs nothing", () => {
  const plan = planFromAuth([
    // Mode is irrelevant for anthropic — it is always served by the Claude Code CLI.
@@ -82,9 +82,9 @@ test("renderAggregateMarkdown: per-scope addressed bucket, count excludes requal
  const out = renderAggregateMarkdown(results, "tag", []);
  // Worst decision across scopes is approve_with_comments (the requalified-only scope
  // contributes approve, not request_changes).
-  expect(out).toContain("**Decision:** Approve with comments");
+  expect(out).toContain("**Decision:** Ready for human review (with comments)");
  // The api scope's blocking count is 0 (the requalified finding is not counted).
-  expect(out).toMatch(/\| api \| Approve \| 0 \|/);
+  expect(out).toMatch(/\| api \| Ready for human review \| 0 \|/);
  expect(out).toContain("Addressed in stacked PRs (1)");
  expect(out).toContain("marked addressed by stacked PR(s) (#42)");
 });
@@ -4,7 +4,7 @@ import { readFile } from "node:fs/promises";
 import path from "node:path";

 import {
-  CONFIG_DIRNAME,
+  configDirFor,
  hasScopeConfig,
  loadAuthFromRoot,
  loadReviewConfig,
@@ -30,7 +30,12 @@ import { summarizePriorReview } from "../core/prior-review.js";
 import { dropStaleVerdict, feedbackApplied, feedbackNeedsRunSeam } from "../core/adjudicate.js";
 import { runReview } from "../core/review.js";
 import type { ReviewRunOptions, ReviewRunResult } from "../core/review.js";
-import { reviewCanBeReused, reviewInputHash, reviewMatchesInput } from "../core/review-cache.js";
+import {
+  reviewCacheAllowed,
+  reviewCanBeReused,
+  reviewInputHash,
+  reviewMatchesInput,
+} from "../core/review-cache.js";
 import { GitHubPRSource } from "../sources/github-pr.js";
 import { memoizeSource, stackConfirmFromConfig, stackWalkFromConfig } from "../sources/source.js";
 import type { PreparedReadRoot, ReviewSource, StackWalkOptions } from "../sources/source.js";
@@ -490,7 +495,7 @@ function resolveStackConfirm(
 * `.expo-code-review/.runs/reviews.jsonl` from the workspace as an artifact.
 */
 function workspaceRunsDir(cwd: string): string {
-  return path.join(cwd, CONFIG_DIRNAME, ".runs");
+  return path.join(configDirFor(cwd), ".runs");
 }

 /**
@@ -558,6 +563,7 @@ async function runLegacyCi(
    breakGlassMarker: config.breakGlassMarker,
    cwd,
    feedback: config.feedback,
+    inline: config.inline,
    headSha,
  });

@@ -576,13 +582,12 @@ async function runLegacyCi(
  const stack = resolveStackWalk(config.stack, noStackAware);
  const stackConfirm = resolveStackConfirm(config.stack, noStackAware);
  const feedback = adjudicationSeam(config, reporter);
-  // Dynamic stack context and model-backed reply adjudication have inputs outside
-  // the scoped diff. Keep those paths fresh until their inputs join the cache key.
-  // A maintainer's explicit /review is also always a real rerun.
-  // Research no longer forces a fresh run: with the local index gone, every result
-  // is fetched live from an allowlisted host during the run, so there is no mounted
-  // artifact whose contents could drift out from under the cache key.
-  const cacheAllowed = !bypassTriggerGate && !stack && !feedback && metadata !== undefined;
+  const cacheAllowed = reviewCacheAllowed({
+    bypassTriggerGate,
+    stack: Boolean(stack),
+    feedback: Boolean(feedback),
+    hasMetadata: metadata !== undefined,
+  });
  let inputHash: string | undefined;

  // The previous review's embedded comment state, read ONCE: the cache check below
@@ -681,6 +686,10 @@ async function runLegacyCi(
        findings: [],
        summary: `⚠️ The AI reviewer failed to run, so this change was **not** reviewed:\n\n> ${publicFailureReason(error)}`,
        incomplete: [],
+        // A failed run's empty findings list proves nothing: this flag is what keeps
+        // the inline sync additive-only (no thread teardown) — and it renders the
+        // accurate "No review" decision label.
+        couldNotComplete: true,
      });
    } catch (postError) {
      process.stderr.write(
@@ -697,6 +706,10 @@ function failureReview(scopeName: string, reason: string): CoordinatorOutput {
    findings: [],
    summary: `⚠️ The AI reviewer failed to run for scope **${scopeName}**, so those changes were **not** reviewed:\n\n> ${reason}`,
    incomplete: [],
+    // Empty-but-not-clean: keeps the inline sync additive-only for the whole
+    // aggregate (a failed scope's findings may still be live on the PR) and renders
+    // the accurate "No review" label in the scope table.
+    couldNotComplete: true,
  };
 }

@@ -885,6 +898,7 @@ async function runRoutedCi(
      // Root-only feedback config (see loadScopeConfig): lets a reporter posting with
      // no explicit records match replies itself (annotate mode) at report time.
      feedback: rootConfig.feedback,
+      inline: rootConfig.inline,
      headSha,
    });

@@ -905,12 +919,12 @@ async function runRoutedCi(
    reporterFor(scopedCommentTag(rootTag, name), true),
  );

-  const cacheAllowed =
-    !bypassTriggerGate &&
-    !stackWalk &&
-    !feedbackNeedsRunSeam(rootConfig.feedback) &&
-    !rootConfig.research.enabled &&
-    metadata !== undefined;
+  const cacheAllowed = reviewCacheAllowed({
+    bypassTriggerGate,
+    stack: Boolean(stackWalk),
+    feedback: feedbackNeedsRunSeam(rootConfig.feedback),
+    hasMetadata: metadata !== undefined,
+  });
  let cacheReadRoot: string | undefined;
  if (cacheAllowed) {
    try {
@@ -1119,7 +1133,12 @@ async function runRoutedCi(
            aggState?.pins,
          )
        : undefined;
-      await aggregate.reportAggregate(finalResults, resolution.unmatched, aggFeedback);
+      // A --scopes partial run carries the other scopes out of (possibly truncated)
+      // embedded state, so its target set is incomplete: inline teardown must not
+      // run (failed scopes are handled inside reportAggregate itself).
+      await aggregate.reportAggregate(finalResults, resolution.unmatched, aggFeedback, {
+        inlineTeardown: !scopesFilter,
+      });
    }
    // Clean up any per-scope comments from a previous per-scope run. A partial run
    // only ever touches the named scopes' comments.
@@ -98,6 +98,8 @@ export async function dismissCommand(argv: string[], mode: "add" | "remove"): Pr
      // feedback policy in force now — without it a reply-cleared finding would be
      // un-hidden by an unrelated /dismiss.
      feedback: config.feedback,
+      // Lets the dismissal stub/revive the finding's inline thread (additive-only).
+      inline: config.inline,
    });
    const result = await reporter.applyDismissal(
      mode === "add" ? args.ids : [],
@@ -4,6 +4,7 @@ import {
  loadScopeConfig,
  loadAuthFromRoot,
  hasConfig,
+  CONFIG_DIRNAME,
  resolveConfigDir,
  tokenEnvMismatch,
 } from "../config/load.js";
@@ -246,7 +247,7 @@ export async function doctorCommand(argv: string[] = []): Promise<void> {
  }

  if (!hasConfig(root)) {
-    line(false, `no ${".expo-code-review"}/config.jsonc (run \`ecr init\`)`);
+    line(false, `no ${CONFIG_DIRNAME}/config.jsonc (run \`ecr init\`)`);
  } else {
    try {
      // Reuse the engine-detection peek above; re-load only if that failed so
@@ -479,9 +480,7 @@ async function listScopes(root: string): Promise<void> {
    return;
  }
  if (!manifest) {
-    process.stdout.write(
-      `No ${".expo-code-review"}/routing.jsonc — run \`ecr init --monorepo\`.\n`,
-    );
+    process.stdout.write(`No ${CONFIG_DIRNAME}/routing.jsonc — run \`ecr init --monorepo\`.\n`);
    process.exitCode = 0;
    return;
  }
@@ -4,7 +4,7 @@ import { existsSync } from "node:fs";
 import path from "node:path";
 import { fileURLToPath } from "node:url";

-import { CONFIG_DIRNAME } from "../config/load.js";
+import { CONFIG_DIRNAME, configDirFor } from "../config/load.js";
 import { ROUTING_FILENAME } from "../config/routing.js";
 import { RoutingScopeSchema, type RoutingScope } from "../config/schema.js";
 import { FORBIDDEN_TOKEN_ENVS } from "../core/auth.js";
@@ -13,7 +13,7 @@ import { errorMessage } from "../core/util.js";

 const TEMPLATES_DIR = fileURLToPath(new URL("../../templates/", import.meta.url));

-const USAGE = `ecr init — scaffold .expo-code-review/ in the current repo
+const USAGE = `ecr init — scaffold .expo-agents/code-review/ in the current repo (a legacy .expo-code-review/ is reused)

 Usage:
  ecr init [--no-workflow] [--force]      Scaffold the root config (+ CI workflow)
@@ -22,8 +22,8 @@ Usage:
                                          register it in the root routing.jsonc

 Options:
-  --monorepo      Also write .expo-code-review/routing.jsonc (routing manifest)
-  --scope <dir>   Scaffold <dir>/.expo-code-review/ (no auth) + add a scope entry
+  --monorepo      Also write routing.jsonc in the setup dir (routing manifest)
+  --scope <dir>   Scaffold <dir>/.expo-agents/code-review/ (no auth) + add a scope entry
  --no-workflow   Skip writing the CI workflows (review, command, and dismiss
                  under .github/workflows/)
  --token-env <name[,name…]>
@@ -83,7 +83,7 @@ async function scaffold(argv: string[]): Promise<void> {
  }

  const root = (await repoRoot()) ?? process.cwd();
-  const configDir = path.join(root, CONFIG_DIRNAME);
+  const configDir = configDirFor(root); // an existing legacy .expo-code-review/ is kept, never doubled

  // A non-default --token-env only takes effect through the review workflows,
  // but existing workflow files are skipped (not rewritten) without --force —
@@ -286,7 +286,7 @@ async function scaffoldScope(argv: string[], scopeDirRaw: string): Promise<void>
    );
  }

-  const configDir = path.join(root, scopeDir, CONFIG_DIRNAME);
+  const configDir = configDirFor(path.join(root, scopeDir));
  await mkdir(configDir, { recursive: true });

  const created: string[] = [];
@@ -147,6 +147,7 @@ export async function postReviewCommand(argv: string[]): Promise<void> {
      breakGlassMarker: config.breakGlassMarker,
      cwd,
      feedback: config.feedback,
+      inline: config.inline,
      headSha,
    });
    const result = await publishDeferredReview(reporter, artifact, async () => {
@@ -276,6 +276,8 @@ export async function reviewCommand(argv: string[]): Promise<void> {
                cwd,
                // Root-only feedback config (loadScopeConfig inherits it from the root).
                feedback: config.feedback,
+                // Root-only too (loadScopeConfig inherits it from the root).
+                inline: config.inline,
                headSha: await reviewedHeadSha(source),
              })
            : null;
@@ -361,6 +363,7 @@ export async function reviewCommand(argv: string[]): Promise<void> {
            breakGlassMarker: config.breakGlassMarker,
            cwd,
            feedback: config.feedback,
+            inline: config.inline,
            headSha,
          })
        : null;
@@ -25,7 +25,8 @@ getting each credential:
    opens your browser) and prints the \`export <tokenEnv>=…\` line for
    CI/headless runs.
  • an API key (api-key entries): prints where to create the key, the exact
-    permissions it needs, and the export line to fill in.
+    permissions it needs, and the export line to fill in. Meta Model API
+    (\`meta/muse-spark-…\`) uses META_API_KEY from the Meta AI developer portal.

 Without a repo config, it offers the recommended ChatGPT/Codex subscription flow
 with the default env name.
@@ -300,6 +301,10 @@ export async function setupAuthCommand(argv: string[] = []): Promise<void> {
      } else if (upstream === "anthropic") {
        err("  https://console.anthropic.com/settings/keys — a workspace-scoped key");
        err("  with a spend limit is all the reviewer needs.");
+      } else if (upstream === "meta") {
+        // @ref LLP 0007#doctor-and-setup-auth [implements] — Meta uses a manual API key
+        err("  https://developer.meta.com/ai/ — create a Model API key with access to");
+        err("  Muse Spark, then store it as a dedicated review secret.");
      } else {
        err(`  mint a key for the "${upstream}" provider.`);
      }
@@ -2,7 +2,13 @@
 import { readdir, readFile } from "node:fs/promises";
 import path from "node:path";

-import { CONFIG_DIRNAME, stripJsonComments, stripTrailingCommas } from "../config/load.js";
+import {
+  CONFIG_DIRNAME,
+  configDirFor,
+  isConfigDirPath,
+  stripJsonComments,
+  stripTrailingCommas,
+} from "../config/load.js";
 import { ROUTING_FILENAME } from "../config/routing.js";
 import { repoRoot } from "../core/exec.js";
 import { errorMessage } from "../core/util.js";
@@ -76,11 +82,7 @@ async function discoverConfigFiles(root: string): Promise<string[]> {
          continue;
        }
        await walk(path.join(dir, entry.name));
-      } else if (
-        entry.isFile() &&
-        path.basename(dir) === CONFIG_DIRNAME &&
-        CONFIG_FILENAMES.has(entry.name)
-      ) {
+      } else if (entry.isFile() && isConfigDirPath(dir) && CONFIG_FILENAMES.has(entry.name)) {
        found.push(path.join(dir, entry.name));
      }
    }
@@ -145,7 +147,7 @@ export async function verifyConfig(
  options: { expected?: string } = {},
 ): Promise<VerifyResult> {
  const findings: VerifyFinding[] = [];
-  const rootConfigDir = path.join(root, CONFIG_DIRNAME);
+  const rootConfigDir = configDirFor(root);
  const rel = (file: string): string => path.relative(root, file) || path.basename(file);

  const files = await discoverConfigFiles(root);
@@ -17,7 +17,25 @@ import type {
 } from "./schema.js";
 import { toolMap } from "../core/tools.js";

-export const CONFIG_DIRNAME = ".expo-code-review";
+/**
+ * The setup directory. `.expo-agents/code-review/` is the home from 0.15.0 —
+ * one `.expo-agents/` directory holds every Expo agent tool's per-repo files
+ * (code-review, verify) instead of one dot directory per tool at the root.
+ * The pre-0.15 `.expo-code-review/` keeps working unchanged: every lookup
+ * takes whichever of the two exists (new first), and scaffolding writes into
+ * an existing legacy directory rather than starting a second one.
+ */
+export const CONFIG_DIRNAME = path.join(".expo-agents", "code-review");
+export const LEGACY_CONFIG_DIRNAME = ".expo-code-review";
+export const CONFIG_DIRNAMES: readonly string[] = [CONFIG_DIRNAME, LEGACY_CONFIG_DIRNAME];
+
+/** Does this directory path name a setup dir (either spelling)? */
+export function isConfigDirPath(dir: string): boolean {
+  const normalized = path.normalize(dir);
+  return CONFIG_DIRNAMES.some(
+    (name) => normalized === name || normalized.endsWith(path.sep + name),
+  );
+}

 /** Stack config for a scope load (where `stack` is schema-rejected and absent). */
 const STACK_CONFIG_DEFAULTS: LoadedConfig["stack"] = {
@@ -39,6 +57,12 @@ const FEEDBACK_CONFIG_DEFAULTS: LoadedConfig["feedback"] = {
  maxAdjudications: 10,
 };

+/** Inline-comment config for a scope load (where `inline` is schema-rejected). */
+const INLINE_CONFIG_DEFAULTS: LoadedConfig["inline"] = {
+  enabled: false,
+  maxComments: 20,
+};
+
 /** Research defaults for a scope load (where `research` is schema-rejected). */
 const RESEARCH_CONFIG_DEFAULTS: LoadedConfig["research"] = {
  enabled: false,
@@ -50,22 +74,34 @@ const RESEARCH_CONFIG_DEFAULTS: LoadedConfig["research"] = {
 /** Default OpenCode tool toggles for a reviewer: read the repo, never mutate it. */
 const DEFAULT_AGENT_TOOLS = toolMap(["read", "grep", "glob", "list"]);

-export function configDirFor(repoRoot: string): string {
-  return path.join(repoRoot, CONFIG_DIRNAME);
+/**
+ * The setup dir under `base`: `.expo-agents/code-review/` when it exists, else
+ * the legacy `.expo-code-review/` when THAT exists, else the new name (for
+ * messages and for scaffolding a fresh repo). Works for the repo root and for
+ * scope directories alike.
+ */
+export function configDirFor(base: string): string {
+  for (const name of CONFIG_DIRNAMES) {
+    const candidate = path.join(base, name);
+    if (existsSync(candidate)) {
+      return candidate;
+    }
+  }
+  return path.join(base, CONFIG_DIRNAME);
 }

 /**
 * Resolve the config directory: an explicit override (absolute or repo-relative)
- * → the ECR_CONFIG_DIR env var → the repo's default `.expo-code-review/`. This is
- * the escape hatch (graft 1); with neither override present the result is exactly
- * `configDirFor(repoRoot)`, so the default behavior is byte-identical.
+ * → the ECR_CONFIG_DIR env var → the repo's default setup dir (new name, then
+ * legacy). This is the escape hatch (graft 1); with neither override present the
+ * result is exactly `configDirFor(repoRoot)`.
 */
 export function resolveConfigDir(repoRoot: string, override?: string): string {
  const chosen = override ?? process.env.ECR_CONFIG_DIR;
  if (chosen) {
    return path.isAbsolute(chosen) ? chosen : path.join(repoRoot, chosen);
  }
-  return path.join(repoRoot, CONFIG_DIRNAME);
+  return configDirFor(repoRoot);
 }

 export interface LoadConfigOptions {
@@ -76,7 +112,7 @@ export interface LoadConfigOptions {
 /** Parsed config with the centrally-locked keys optional (scope configs omit them). */
 type ParsedConfig = Omit<
  RawReviewConfig,
-  "auth" | "breakGlass" | "commentTag" | "stack" | "feedback" | "research"
+  "auth" | "breakGlass" | "commentTag" | "stack" | "feedback" | "research" | "inline"
 > & {
  auth?: RawReviewConfig["auth"];
  breakGlass?: RawReviewConfig["breakGlass"];
@@ -84,6 +120,7 @@ type ParsedConfig = Omit<
  stack?: RawReviewConfig["stack"];
  feedback?: RawReviewConfig["feedback"];
  research?: RawReviewConfig["research"];
+  inline?: RawReviewConfig["inline"];
 };

 export function hasConfig(repoRoot: string, options: LoadConfigOptions = {}): boolean {
@@ -219,6 +256,8 @@ async function loadConfigDir(
    // for a scope config and the defaults stand in (unused — the command layer
    // reads the ROOT config's feedback values; the comment lifecycle is global).
    feedback: parsed.feedback ?? FEEDBACK_CONFIG_DEFAULTS,
+    // Root-only, same reasoning as feedback.
+    inline: parsed.inline ?? INLINE_CONFIG_DEFAULTS,
  };
  return { config, raw: rawObject };
 }
@@ -311,7 +350,7 @@ export function hasScopeConfig(root: string, scope: RoutingScope): boolean {
  if (scope.config === ".") {
    return true;
  }
-  const dir = path.join(root, scope.config, CONFIG_DIRNAME);
+  const dir = configDirFor(path.join(root, scope.config));
  return existsSync(path.join(dir, "config.jsonc")) || existsSync(path.join(dir, "config.json"));
 }

@@ -345,7 +384,7 @@ export async function loadScopeConfig(
        `scope "${scope.name}": config "${scope.config}" resolves outside the repo checkout`,
      );
    }
-    const dir = path.join(root, scope.config, CONFIG_DIRNAME);
+    const dir = configDirFor(path.join(root, scope.config));
    const { config } = await loadConfigDir(dir, ScopeReviewConfigSchema);
    base = config;
    // Non-default scopes never carry their own marker (the scope schema rejects
@@ -386,6 +425,7 @@ export async function loadScopeConfig(
    // run the default policy instead of the repo's real one.
    stack: rootConfig.stack,
    feedback: rootConfig.feedback,
+    inline: rootConfig.inline,
    research: rootConfig.research,
    scopeName: scope.name,
  };
@@ -224,6 +224,20 @@ export const ReviewConfigSchema = z.object({
      protectedCategories: ["secrets", "security"],
      maxAdjudications: 10,
    }),
+  // Inline PR review comments for findings anchored to a line in the diff: the
+  // main comment stays the durable state store and renders such findings short,
+  // linking to the inline thread. ROOT-ONLY (the comment lifecycle is global) and
+  // off by default — a feature that mutates N comments per run earns trust with
+  // field data first. Turning it off later leaves existing threads up (documented);
+  // clear() still sweeps them on comment-mode switches.
+  inline: z
+    .object({
+      enabled: z.boolean().default(false),
+      // Cap on inline comments PER REPORTER: per PR in single/legacy comment mode,
+      // per scope in per-scope mode. Bounds create-notification fan-out and API use.
+      maxComments: z.number().int().positive().default(20),
+    })
+    .default({ enabled: false, maxComments: 20 }),
 });
 export type RawReviewConfig = z.infer<typeof ReviewConfigSchema>;

@@ -335,6 +349,7 @@ export const ScopeReviewConfigSchema = ReviewConfigSchema.omit({
  stack: true,
  feedback: true,
  research: true,
+  inline: true,
 }).extend({
  auth: z
    .never({ error: "auth is locked to the root config; remove it from this scope config" })
@@ -364,6 +379,12 @@ export const ScopeReviewConfigSchema = ReviewConfigSchema.omit({
        "research is locked to the root config because it starts a trusted host process; remove it from this scope config",
    })
    .optional(),
+  inline: z
+    .never({
+      error:
+        "inline is locked to the root config (the comment lifecycle is global); remove it from this scope config",
+    })
+    .optional(),
 });
 export type RawScopeReviewConfig = z.infer<typeof ScopeReviewConfigSchema>;

@@ -468,4 +489,9 @@ export interface LoadedConfig {
    protectedCategories: Category[];
    maxAdjudications: number;
  };
+  /** Root-only inline-comment settings (see ReviewConfigSchema.inline). */
+  inline: {
+    enabled: boolean;
+    maxComments: number;
+  };
 }
@@ -15,6 +15,7 @@ const PROVIDER_KEY_ENV: Record<string, string> = {
  openai: "OPENAI_API_KEY",
  google: "GOOGLE_GENERATIVE_AI_API_KEY",
  openrouter: "OPENROUTER_API_KEY",
+  meta: "META_API_KEY",
 };

 /**
@@ -92,17 +92,16 @@ const READ_TOOL_MAP: Record<string, "Read" | "Grep" | "Glob"> = {
  glob: "Glob",
 };
 const ALL_READ_TOOLS = ["Read", "Grep", "Glob"] as const;
-// @ref LLP 0003#claude-code-cli-containment [implements] — deny enumeration (not allow-only) because an empty/absent --allowedTools list default-ALLOWS reads; verified against claude 2.1.212, revisit on every CLI version bump
+// @ref LLP 0003#claude-code-cli-containment [implements] — inner deny layer behind --tools, because an empty/absent --allowedTools list default-ALLOWS reads; verified against claude 2.1.212, tool list re-checked against 2.1.280 (ListAgents added)
 /**
- * Tools never available to a review pass, whatever the role. A DENY enumeration is
- * the only workable containment: permission rules cannot fail closed here — reads
+ * Tools never available to a review pass, whatever the role. The primary bound is
+ * `--tools` (see buildClaudeArgs), which loads only the granted read tools; this
+ * list is the inner layer behind it. Permission rules alone cannot fail closed — reads
 * inside the workspace are default-ALLOWED even when an allow list is present but
 * unmatched, and a `*` deny breaks tool calling outright (both verified against
- * claude 2.1.212). The residual risk — a FUTURE CLI version shipping a new
- * read-capable tool this list doesn't name — is bounded by pinning the CLI version
- * (the scaffolded workflow installs an exact @anthropic-ai/claude-code version;
- * bump it deliberately and revisit this list). Unknown names are ignored by the
- * CLI, so denying tools that don't exist in a given version is harmless.
+ * claude 2.1.212). A FUTURE CLI version shipping a new tool this list doesn't name
+ * is no longer the gap it was: `--tools` does not load it. Unknown names are ignored
+ * by the CLI, so denying tools that don't exist in a given version is harmless.
 */
 const ALWAYS_DENIED_TOOLS = [
  "Bash",
@@ -117,6 +116,7 @@ const ALWAYS_DENIED_TOOLS = [
  "BashOutput",
  "KillShell",
  "ExitPlanMode",
+  "ListAgents",
 ];

 /**
@@ -273,6 +273,16 @@ export function claudeModelMatches(requested: string, actualKey: string): boolea
 * tree itself (paths resolve to absolute), and `Read(~/**)` denies the whole tree
 * whenever the repo lives under the home directory — the common case.
 *
+ * `--tools` is the outer bound: it names the built-in tools the CLI LOADS, so
+ * everything else (including tools a future CLI version adds) never reaches the
+ * model. It is an availability allowlist, not a permission rule, so it fails closed
+ * where `--allowedTools` does not. Verified against claude 2.1.280: `dontAsk` does
+ * NOT stop tools that ask no permission — EnterWorktree created a git worktree,
+ * RemoteTrigger listed the account's cloud routines, SendMessage and Skill ran — and
+ * `--tools` removes them all. MCP tools (the research tools) and the CLI's own
+ * StructuredOutput tool (`--json-schema`) are not in the built-in set and stay
+ * loaded. The scoped allow rules and ALWAYS_DENIED_TOOLS stay as the inner layers.
+ *
 * This is NOT, by itself, a boundary against a symlink committed inside the PR-head
 * tree (e.g. `docs/notes.md -> ~/.claude/.credentials.json`): the permission rule
 * matches the literal path ARGUMENT, which is in-tree, but Read/Grep then follow the
@@ -324,6 +334,9 @@ export function buildClaudeArgs(opts: {
    "--append-system-prompt",
    opts.system,
    ...(opts.jsonSchema ? ["--json-schema", JSON.stringify(opts.jsonSchema)] : []),
+    // @ref LLP 0003#claude-code-cli-containment [implements] — load only the granted read tools; "" loads none
+    "--tools",
+    enabled.join(","),
    ...(allowedTools.length > 0 ? ["--allowedTools", ...allowedTools] : []),
    "--disallowedTools",
    ...deniedReadTools,
@@ -582,6 +595,9 @@ export function parseClaudeResult(stdout: string): ClaudeResult {
  const tokens: TokenUsage = {
    input: num(usage.input_tokens),
    output: num(usage.output_tokens),
+    reasoning: num(
+      (usage.output_tokens_details as Record<string, unknown> | null | undefined)?.thinking_tokens,
+    ),
    cache: {
      write: num(usage.cache_creation_input_tokens),
      read: num(usage.cache_read_input_tokens),
@@ -4,7 +4,13 @@
 import { readdir, readFile, stat } from "node:fs/promises";
 import path from "node:path";

-import { CONFIG_DIRNAME, stripJsonComments, stripTrailingCommas } from "../config/load.js";
+import {
+  CONFIG_DIRNAME,
+  LEGACY_CONFIG_DIRNAME,
+  configDirFor,
+  stripJsonComments,
+  stripTrailingCommas,
+} from "../config/load.js";
 import { ROUTING_FILENAME } from "../config/routing.js";
 import { git, pathInside } from "./exec.js";
 import { matchesIgnore } from "./noise.js";
@@ -518,10 +524,18 @@ export async function discoverSetupDirs(root: string): Promise<string[]> {
        continue;
      }
      const child = path.join(dir, entry.name);
-      if (entry.name === CONFIG_DIRNAME) {
+      if (entry.name === LEGACY_CONFIG_DIRNAME) {
        found.push(child);
        continue; // a setup dir never nests another
      }
+      if (entry.name === ".expo-agents") {
+        // The shared Expo agent-tools dir: only its code-review/ child is ours.
+        const setup = path.join(dir, CONFIG_DIRNAME);
+        if ((await pathKind(setup)) === "dir") {
+          found.push(setup);
+        }
+        continue;
+      }
      // Other dot dirs are skipped wholesale: `.claude/worktrees/` holds checkouts of
      // this same repo, whose setup dirs would otherwise be swept as if they were scopes.
      if (entry.name === "node_modules" || entry.name.startsWith(".")) {
@@ -617,7 +631,7 @@ async function checkRoutingManifest(
    }
    const configDir = typeof entry.config === "string" ? entry.config : null;
    if (configDir) {
-      const setupDir = path.resolve(index.root, configDir, CONFIG_DIRNAME);
+      const setupDir = configDirFor(path.resolve(index.root, configDir));
      if (!pathInside(setupDir, index.root)) {
        problems.push({
          file: relative,
@@ -630,7 +644,7 @@ async function checkRoutingManifest(
          file: relative,
          line: 1,
          kind: "structural",
-          problem: `scope "${name}" has no ${configDir}/${CONFIG_DIRNAME}/ directory`,
+          problem: `scope "${name}" has no ${configDir}/${CONFIG_DIRNAME}/ (or ${LEGACY_CONFIG_DIRNAME}/) directory`,
        });
      }
    }
@@ -56,6 +56,10 @@ export function reviewPostingConfigFingerprint(config: LoadedConfig): string {
        commentTag: config.commentTag,
        breakGlassMarker: config.breakGlassMarker,
        feedback: config.feedback,
+        // Inline comments change what posting does (N review-comment mutations), so a
+        // saved review must not post under a different inline policy than it was
+        // saved with.
+        inline: config.inline,
      }),
    )
    .digest("hex");
@@ -19,6 +19,74 @@ import type { ResearchMcpRuntime } from "./research.js";
 /** Discriminant for the Claude Code CLI engine (see core/claude-code.ts). */
 export const CLAUDE_CODE_ENGINE = "claude-code" as const;

+/** Fixed so repo config cannot redirect the Meta credential. */
+// @ref LLP 0003#muse-spark-via-meta-model-api [implements] — fixed endpoint, provider routing, and known-model metadata
+export const META_MODEL_API_BASE_URL = "https://api.meta.ai/v1";
+
+/** Known public Muse models. Other explicit `meta/...` ids use neutral metadata. */
+export const META_MUSE_MODELS: Record<string, Record<string, unknown>> = {
+  "muse-spark-1.2": {
+    name: "Muse Spark 1.2",
+    reasoning: true,
+    limit: { context: 1_048_576, output: 131_072 },
+    modalities: {
+      input: ["text", "image", "pdf", "video"],
+      output: ["text"],
+    },
+    options: {
+      store: false,
+      reasoningEffort: "high",
+      reasoningSummary: "auto",
+      include: ["reasoning.encrypted_content"],
+    },
+  },
+  "muse-spark-1.2-contributor": {
+    name: "Muse Spark 1.2 Contributor",
+    reasoning: true,
+    limit: { context: 1_048_576, output: 131_072 },
+    modalities: {
+      input: ["text", "image", "pdf", "video"],
+      output: ["text"],
+    },
+    options: {
+      store: false,
+      reasoningEffort: "high",
+      reasoningSummary: "auto",
+      include: ["reasoning.encrypted_content"],
+    },
+  },
+  "muse-spark-1.3": {
+    name: "Muse Spark 1.3",
+    reasoning: true,
+    limit: { context: 1_048_576, output: 1_048_576 },
+    modalities: {
+      input: ["text", "image", "pdf", "video"],
+      output: ["text"],
+    },
+    options: {
+      store: false,
+      reasoningEffort: "high",
+      reasoningSummary: "auto",
+      include: ["reasoning.encrypted_content"],
+    },
+  },
+  "muse-spark-1.3-contributor": {
+    name: "Muse Spark 1.3 Contributor",
+    reasoning: true,
+    limit: { context: 1_048_576, output: 1_048_576 },
+    modalities: {
+      input: ["text", "image", "pdf", "video"],
+      output: ["text"],
+    },
+    options: {
+      store: false,
+      reasoningEffort: "high",
+      reasoningSummary: "auto",
+      include: ["reasoning.encrypted_content"],
+    },
+  },
+};
+
 /**
 * Resolve which engine an agent's pass dispatches to, and (when claude) which
 * claude handle to run it against. The per-agent router (engineOf) wins; absent it
@@ -221,6 +289,36 @@ export function buildOpencodeConfig(
    config.coordinator.model,
  ];
  for (const entry of config.auth) {
+    if (
+      entry.provider === "meta" &&
+      entry.mode === "api-key" &&
+      entry.tokenEnv &&
+      !entry.upstream
+    ) {
+      // Meta's Model API uses the Responses adapter; openai-compatible uses Chat
+      // Completions. Register every explicitly referenced `meta/…` model so a new
+      // Meta family/name does not require an ECR release merely to select the right
+      // provider. Known Muse ids get their published capabilities; unknown ids stay
+      // neutral and are validated by Meta on their first request.
+      const models: Record<string, unknown> = {};
+      for (const id of referencedModels) {
+        const slash = id.indexOf("/");
+        if (slash > 0 && id.slice(0, slash) === "meta" && id.length > slash + 1) {
+          const model = id.slice(slash + 1);
+          models[model] = META_MUSE_MODELS[model] ?? {};
+        }
+      }
+      provider.meta = {
+        npm: "@ai-sdk/openai",
+        name: "Meta Model API",
+        options: {
+          baseURL: META_MODEL_API_BASE_URL,
+          apiKey: `{env:${entry.tokenEnv}}`,
+        },
+        models,
+      };
+      continue;
+    }
    if (!entry.upstream || !entry.tokenEnv) {
      continue;
    }
@@ -35,6 +35,16 @@ export interface LinkContext {
  repo: string; // owner/repo
  prNumber: number;
  diffLines?: Map<string, Set<number>>;
+  /**
+   * Permalinks to this run's live inline finding comments, keyed by the SAME id the
+   * comment renders (plain fingerprint, or scope-namespaced for an aggregate). A
+   * finding with an entry renders in SHORT form — title, links, one-line rationale —
+   * because its full text lives in the inline thread; a finding without one renders
+   * in full exactly as before. Callers must pass a per-render COPY of a shared
+   * LinkContext (`{ ...link, inlineUrls }`), never mutate the shared object: the
+   * routed ci flow shares one context across every scope reporter.
+   */
+  inlineUrls?: Map<string, string>;
  /**
   * The PR base commit SHA (the branch the PR targets, e.g. `main`). When a finding
   * points at code NOT in the diff — a caller or helper the PR merely references,
@@ -86,9 +96,12 @@ export function buildDiffLineIndex(
  return index;
 }

+// User-facing labels only — the wire/schema enum stays `approve` etc. The review
+// is advisory and never approves anything, so the labels must not read as an
+// approval either: a clean result is "ready for a human", not "approved".
 const DECISION_LABEL: Record<Decision, string> = {
-  approve: "Approve",
-  approve_with_comments: "Approve with comments",
+  approve: "Ready for human review",
+  approve_with_comments: "Ready for human review (with comments)",
  request_changes: "Request changes",
 };

@@ -118,6 +131,29 @@ export function commentMarker(tag: string): string {
  return `<!-- ${tag} -->`;
 }

+/**
+ * Per-finding identity marker of an inline (PR review) comment, always rendered at
+ * byte 0 of the body. Substring-safe against `commentMarker(tag)` and any derived
+ * scope tag (`<tag>:<scope>`) in both directions — the closing ` -->` differs —
+ * including a scope literally named `inline`.
+ */
+export function inlineCommentMarker(tag: string, fp: string): string {
+  return `<!-- ${tag}:inline:fp=${fp} -->`;
+}
+
+/**
+ * The fingerprint an inline comment of OURS carries, or null. Anchored at byte 0
+ * and constrained to the fingerprint alphabet, so a marker echoed later in a body
+ * (untrusted prose, a quote-reply) can never parse as identity — mechanical
+ * safety, not just the incidental "our renderer emits it first". Identity itself
+ * is author + this marker (see the reporter); the parse alone proves nothing.
+ */
+export function parseInlineMarkerFp(body: string, tag: string): string | null {
+  const escapedTag = tag.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+  const match = body.match(new RegExp(`^<!-- ${escapedTag}:inline:fp=([a-f0-9]{6,64}) -->`));
+  return match ? match[1]! : null;
+}
+
 // @ref LLP 0011#forged-state-markers [implements] — the first-match parsers make an earlier forged marker win, so untrusted prose never keeps a raw `<!--`
 /**
 * Neutralize anything that could impersonate this reviewer's embedded state
@@ -345,12 +381,62 @@ function sourceLabel(value: string): string {
    .replace(/([\\[\]])/g, "\\$1");
 }

+/** Longest one-line rationale excerpt the short form keeps in the main comment. */
+const SHORT_RATIONALE_CHARS = 160;
+
+/**
+ * HTML formatting tags a model writes into a rationale (`<br>`, `<details>`, ...).
+ * A fixed list, not "anything in angle brackets", so a type like `Promise<void>`
+ * in the prose survives.
+ */
+const FORMATTING_TAG_RE =
+  /<\/?(?:a|b|blockquote|br|code|del|details|div|em|h[1-6]|hr|i|kbd|li|ol|p|pre|s|span|strong|sub|summary|sup|table|tbody|td|th|thead|tr|u|ul)\b[^<>]*>/gi;
+
+/**
+ * A rationale reduced to one plain line for the short (inlined) form: HTML
+ * formatting tags removed (an escaped `<br>` would show as literal text),
+ * whitespace collapsed, every remaining `<` escaped so a truncated HTML block can
+ * never leave an unclosed tag in the comment, cut at a word boundary with an
+ * ellipsis. This excerpt is the audit trail that survives the PR author collapsing
+ * or resolving the inline thread, so it must always be non-empty when the rationale is.
+ */
+export function oneLineRationale(text: string): string {
+  const flat = text
+    .replace(FORMATTING_TAG_RE, " ")
+    .replace(/</g, "&lt;")
+    .replace(/\s+/g, " ")
+    .trim();
+  if (flat.length <= SHORT_RATIONALE_CHARS) {
+    return flat;
+  }
+  const cut = flat.slice(0, SHORT_RATIONALE_CHARS);
+  const atWord = cut.slice(0, cut.lastIndexOf(" "));
+  return `${atWord.length > 0 ? atWord : cut}…`;
+}
+
+/** Only ever link to github.com from a stored/returned URL (see REPLY_URL_RE). */
+function validInlineUrl(link: LinkContext | undefined, id: string): string | null {
+  const url = link?.inlineUrls?.get(id);
+  return url && REPLY_URL_RE.test(url) ? url : null;
+}
+
 function renderFindingLines(
  finding: Finding,
  link?: LinkContext,
  id: string = fingerprintFinding(finding),
  reply?: FeedbackRecord,
 ): string[] {
+  const inlineUrl = validInlineUrl(link, id);
+  if (inlineUrl) {
+    // Short form: the full text lives in the inline thread on the flagged line.
+    // The one-line rationale stays here as the durable audit trail (the author
+    // can collapse/resolve the thread; they cannot edit this comment).
+    return [
+      `- **${stripStateMarkers(finding.title)}** — ${location(finding, link)} _(${finding.category})_ · \`id:${id}\` · 💬 [inline comment](${inlineUrl})${replyAnnotation(reply)}`,
+      ...indentContinuation(oneLineRationale(stripStateMarkers(finding.rationale))),
+      "",
+    ];
+  }
  const out = [
    `- **${stripStateMarkers(finding.title)}** — ${location(finding, link)} _(${finding.category})_ · \`id:${id}\`${replyAnnotation(reply)}`,
    ...indentContinuation(stripStateMarkers(finding.rationale)),
@@ -373,6 +459,53 @@ function renderFindingLines(
  return out;
 }

+/**
+ * Full body of one inline (PR review) finding comment: identity marker at byte 0,
+ * then the finding rendered whole — everything model-written passes
+ * stripStateMarkers, same as the main comment. The footer teaches the clearing
+ * flow (an UNQUOTED id citation), since the main comment only shows the short form.
+ * The body must never contain `:state=`/`:fingerprints=` (it would be dropped as
+ * our own main comment by the reply matcher's backstop) — it doesn't.
+ */
+export function renderInlineCommentBody(finding: Finding, tag: string, fp: string): string {
+  const lines = [
+    inlineCommentMarker(tag, fp),
+    `**${severityHeading(finding.severity)}: ${stripStateMarkers(finding.title)}** _(${finding.category})_ · \`id:${fp}\``,
+    "",
+    stripStateMarkers(finding.rationale),
+  ];
+  if (finding.sources?.length) {
+    const sources = finding.sources
+      .map((source) => `[${sourceLabel(source.title)}](<${source.url}>)`)
+      .join(", ");
+    lines.push("", `**Sources:** ${sources}`);
+  }
+  if (finding.suggestion) {
+    lines.push("", `**Suggestion:** ${stripStateMarkers(finding.suggestion)}`);
+  }
+  lines.push(
+    "",
+    "---",
+    `_🤖 AI review finding — reply here to respond; write \`id:${fp}\` (outside any quote) in your reply to formally answer it. Full review in the main PR comment._`,
+  );
+  return lines.join("\n");
+}
+
+/**
+ * What a no-longer-tracked inline comment is patched to when its thread has human
+ * replies (a bare one is deleted instead). Deliberately NEUTRAL: a finding leaves
+ * the inline set for many reasons that are not resolution — capped out, its line
+ * left the diff, aggregate-state truncation — so this text must never assert
+ * "resolved" or "dismissed". The marker stays, so a returning finding revives the
+ * same thread instead of opening a new one.
+ */
+export function inlineStubBody(tag: string, fp: string): string {
+  return [
+    inlineCommentMarker(tag, fp),
+    "_🤖 This finding is no longer tracked inline — see the main review comment for current status._",
+  ].join("\n");
+}
+
 // @ref LLP 0012#run-points-command-and-review [implements] — setup advice renders outside the findings list, so it never blocks
 /** Advice about the reviewer's own setup (stale refs, cited code this PR moves). */
 function setupNote(notes: string[] = []): string[] {
@@ -3,6 +3,9 @@ import type { FeedbackRecord, Finding } from "./schema.js";

 /** One human comment on the PR, as the reporter hands it over. */
 export interface ReplyComment {
+  /** Issue-comment id, or the NEGATED PR-review-comment id for an inline reply.
+   * The two GitHub id sequences are independent, so negation keeps them
+   * collision-free in every stored/compared FeedbackRecord.commentId. */
  id: number;
  body: string;
  login: string;
@@ -12,6 +15,15 @@ export interface ReplyComment {
   * Absent/false is fail-closed — an unresolved author can never clear a finding. */
  author?: boolean;
  url?: string;
+  /**
+   * For an inline (PR review) reply: the fingerprint of OUR finding whose thread it
+   * answers, resolved by the reporter from `in_reply_to_id` chaining to an
+   * author-verified, marker-anchored inline comment of ours. A structural signal
+   * chosen by the replier (they replied to that thread), so it matches in EVERY
+   * `match` mode — but it never sets `citedId`: clearing still requires the
+   * replier's own unquoted `id:` token.
+   */
+  threadFp?: string;
 }

 /** Blockquote lines read per comment. A reply that quotes half the review is
@@ -35,6 +47,23 @@ const FINDING_ID_RE = /\bid:([a-f0-9]{6,64})\b/gi;
 */
 const OWN_COMMENT_RE = /<!--[^\n]*:(?:state|fingerprints)=/;

+/** The tag-independent shape of an inline finding comment's identity marker. */
+const INLINE_MARKER_RE = /<!--[^\n]*:inline:fp=/;
+
+/**
+ * Tag-independent backstop for OUR inline finding comments, which carry an
+ * UNQUOTED `id:<fp>` token in the body (so a maintainer can copy it into a
+ * reply). If the author/tag filters ever miss one — a bot-login fallback, a
+ * commentTag rename, a second posting identity — matching it as a reply would
+ * let the review cite (and, with maintainer association, CLEAR) its own
+ * finding. Only UNQUOTED lines count: GitHub's "Quote reply" copies our marker
+ * verbatim behind `> `, and that comment is a genuine human reply that must
+ * still be matched.
+ */
+export function hasUnquotedInlineMarker(body: string): boolean {
+  return body.split("\n").some((line) => !/^\s*>/.test(line) && INLINE_MARKER_RE.test(line));
+}
+
 /**
 * Markdown → comparable text: link text without the target, no backticks or
 * emphasis marks, collapsed whitespace, lowercase, no trailing punctuation. A
@@ -82,6 +111,20 @@ export function extractQuotedLines(body: string): string[] {
  return out;
 }

+/**
+ * Is `candidate` a more recent reply than `incumbent`? Issue comments carry
+ * positive ids; inline (PR review) replies carry NEGATED ids, so within the
+ * inline stream recency is the raw id's magnitude, not the signed value. The two
+ * sequences are independent, so cross-stream recency is undecidable — the issue
+ * comment wins deterministically (the main thread is the formal reply channel).
+ */
+export function replyIsNewer(candidate: number, incumbent: number): boolean {
+  if (candidate >= 0 === incumbent >= 0) {
+    return Math.abs(candidate) > Math.abs(incumbent);
+  }
+  return candidate >= 0;
+}
+
 /** The `id:<hex>` tokens a comment cites, lowercased and deduped. */
 export function extractFindingIds(body: string): string[] {
  const ids = [...body.matchAll(FINDING_ID_RE)].map((match) => match[1]!.toLowerCase());
@@ -137,7 +180,7 @@ export function matchReplies(

  const newest = new Map<string, FeedbackRecord>();
  for (const comment of comments) {
-    if (OWN_COMMENT_RE.test(comment.body)) {
+    if (OWN_COMMENT_RE.test(comment.body) || hasUnquotedInlineMarker(comment.body)) {
      continue;
    }
    const matched = new Set<string>();
@@ -145,6 +188,11 @@ export function matchReplies(
    // quote-matched reply still records WHETHER it cites the finding, because that is
    // what decides clearing.
    const cited = new Set(extractCitedFindingIds(comment.body));
+    // An inline reply names its finding structurally — the replier chose which
+    // thread to answer — so it matches in every `match` mode. Never sets `citedId`.
+    if (comment.threadFp && known.has(comment.threadFp)) {
+      matched.add(comment.threadFp);
+    }
    if (opts.match !== "quote") {
      for (const id of extractFindingIds(comment.body)) {
        if (known.has(id)) {
@@ -168,7 +216,7 @@ export function matchReplies(
    }
    for (const fp of matched) {
      const previous = newest.get(fp);
-      if (previous && previous.commentId >= comment.id) {
+      if (previous && !replyIsNewer(comment.id, previous.commentId)) {
        continue;
      }
      newest.set(fp, {
@@ -137,6 +137,32 @@ export async function reviewInputHash(options: ReviewInputHashOptions): Promise<
  return createHash("sha256").update(canonicalJson(input)).digest("hex");
 }

+/**
+ * Whether a run may reuse a cached result at all — the single definition of that
+ * policy, shared by the legacy and routed CI paths.
+ *
+ * It lives here because it was previously written out twice, once per path, and
+ * the copies drifted: when the offline index was removed, only the legacy copy
+ * dropped its research gate, so every routed repo silently kept running fresh
+ * reviews for a reason that no longer existed. Two expressions of one policy is
+ * the bug; one function that both paths call is the fix.
+ *
+ * Each flag means "this run has an input the cache key does not represent":
+ * dynamic stack context and model-backed reply adjudication both reach outside
+ * the scoped diff, and a maintainer's explicit /review is always a real rerun.
+ */
+export function reviewCacheAllowed(run: {
+  bypassTriggerGate: boolean;
+  /** Stack walking is on for this run. */
+  stack: boolean;
+  /** A feedback seam runs this pass (adjudication), not merely annotation. */
+  feedback: boolean;
+  /** PR metadata resolved; without it there is nothing stable to key on. */
+  hasMetadata: boolean;
+}): boolean {
+  return !run.bypassTriggerGate && !run.stack && !run.feedback && run.hasMetadata;
+}
+
 /** Partial/failed reviews must be retried, never made durable by a cache hit. */
 export function reviewCanBeReused(review: CoordinatorOutput): boolean {
  return review.couldNotComplete !== true && review.incomplete.length === 0;
@@ -428,7 +428,16 @@ export function applyPins(
      pin.commentId === undefined ||
      !records.some(
        (record) =>
-          record.fp === pin.fp && record.maintainer === true && record.commentId > pin.commentId!,
+          record.fp === pin.fp &&
+          record.maintainer === true &&
+          // "Posted after the pin" is only decidable within one id sequence. Issue
+          // comments carry positive ids and inline (PR review) replies carry NEGATED
+          // ones (see the reporter's replyComments); the two sequences are
+          // independent, so a cross-stream comparison says nothing about time — keep
+          // the pin. Within a stream, recency is the raw id's magnitude (negation
+          // inverts the signed order for inline ids).
+          record.commentId >= 0 === pin.commentId! >= 0 &&
+          Math.abs(record.commentId) > Math.abs(pin.commentId!),
      ),
  );
  const pinnedFps = new Set(kept.map((pin) => pin.fp));
@@ -4,12 +4,16 @@ import { tmpdir } from "node:os";
 import path from "node:path";

 import { resolveTrustedTool, run } from "../core/exec.js";
+import { errorMessage } from "../core/util.js";
 import { parseUnifiedDiff } from "../core/diff.js";
 import {
  buildDiffLineIndex,
  commentMarker,
+  inlineStubBody,
+  parseInlineMarkerFp,
  parseReviewState,
  renderAggregateMarkdown,
+  renderInlineCommentBody,
  renderMarkdown,
 } from "../core/render.js";
 import type { LinkContext, ReviewState, ScopeReviewResult } from "../core/render.js";
@@ -17,7 +21,13 @@ import { matchReplies } from "../core/responses.js";
 import type { ReplyComment } from "../core/responses.js";
 import { dropStaleVerdict, feedbackApplied, feedbackNeedsPrAuthor } from "../core/adjudicate.js";
 import type { AdjudicationItem } from "../core/adjudicate.js";
-import { applyPins, collectPins, fingerprintFinding, scopedFingerprint } from "../core/schema.js";
+import {
+  applyPins,
+  collectPins,
+  fingerprintFinding,
+  scopedFingerprint,
+  SEVERITY_RANK,
+} from "../core/schema.js";
 import type {
  CoordinatorOutput,
  DismissalRecord,
@@ -52,6 +62,13 @@ export interface GitHubReporterOptions {
   * the reporter behaves exactly as before until a caller opts in.
   */
  feedback?: LoadedConfig["feedback"];
+  /**
+   * Root-only inline-comment config (see LoadedConfig.inline). Absent ⇒ the
+   * reporter never touches PR review comments at all (zero extra API calls);
+   * present with `enabled: false` ⇒ no sync, but `clear()` still sweeps this
+   * tag's inline comments so a comment-mode switch or a disable cleans up.
+   */
+  inline?: LoadedConfig["inline"];
  /**
   * The head commit this run reviews (the PR's immutable head OID, from the source's
   * metadata). Feedback merging binds a stored verdict to the source it judged, so a
@@ -148,6 +165,188 @@ export interface IssueComment {
  html_url?: string;
 }

+/** One PR review (inline/diff) comment, as the pulls comments API returns it. */
+export interface ReviewCommentApi {
+  id: number;
+  body?: string;
+  path?: string;
+  line?: number | null;
+  user?: { login?: string };
+  html_url?: string;
+  /** Present on replies; points at the thread's root comment. */
+  in_reply_to_id?: number;
+  author_association?: string;
+}
+
+/**
+ * Burst-collapsing cache over the paginated review-comments listing, shared across
+ * reporter INSTANCES per PR (same motivation and key shape as prAuthorByPr): routed
+ * single-mode CI builds a fresh reporter per scope for its clear() reconciliation,
+ * and per-instance caching would re-fetch the identical list once per scope. The
+ * short TTL and mutation invalidation mirror fetchAllComments.
+ */
+const reviewCommentsByPr = new Map<string, { at: number; comments: Promise<ReviewCommentApi[]> }>();
+
+/** An existing inline comment of OURS (author + anchored marker), as the planner sees it. */
+export interface ExistingInlineComment {
+  id: number;
+  fp: string;
+  body: string;
+  url?: string;
+  /** Any listed comment replies to it (`in_reply_to_id` === its id). */
+  hasReplies: boolean;
+}
+
+/** What one inline sync run will do. Bodies are rendered by the executor. */
+export interface InlineSyncPlan {
+  /** Findings to POST a new inline comment for (needs a commit id). */
+  create: Array<{ fp: string; finding: Finding }>;
+  /** Live threads whose body converges to the finding's current render. */
+  patch: Array<{ comment: ExistingInlineComment; finding: Finding }>;
+  /** No-longer-tracked threads WITH replies: patch to the neutral stub. */
+  stub: ExistingInlineComment[];
+  /** No-longer-tracked threads with no replies (and older duplicates): delete. */
+  remove: ExistingInlineComment[];
+}
+
+// @ref LLP 0011#suppression-is-never-silent [constrained-by] — leaving the inline set is
+// not resolution: teardown only stubs/deletes when the caller proved the target set is
+// complete, and the stub text (see inlineStubBody) never claims resolved/dismissed
+/**
+ * Decide the inline mutations for one sync, purely. `targets` are the ACTIVE,
+ * diff-anchored findings; `existing` are OUR live inline comments.
+ *
+ * The cap is STICKY and deterministic: candidates order by severity rank then fp,
+ * and fps that already have a live thread fill slots before new ones are admitted —
+ * a live thread is never evicted (and its replies destroyed) just to create a
+ * different one, and a tie at the boundary cannot flip membership run to run.
+ *
+ * `teardown: false` (a failed/partial/carried run whose target set may be
+ * incomplete) makes the plan additive-only: no stubs, no deletes of live threads —
+ * except older DUPLICATES of a kept fp (a crash window between create and list),
+ * which are ours and redundant whatever the target set says.
+ */
+export function planInlineSync(opts: {
+  targets: Array<{ fp: string; finding: Finding }>;
+  existing: ExistingInlineComment[];
+  maxComments: number;
+  teardown: boolean;
+}): InlineSyncPlan {
+  const ordered = [...opts.targets].sort(
+    (a, b) =>
+      SEVERITY_RANK[a.finding.severity] - SEVERITY_RANK[b.finding.severity] ||
+      a.fp.localeCompare(b.fp),
+  );
+
+  // Newest comment per fp is the live thread; older ones are duplicates.
+  const liveByFp = new Map<string, ExistingInlineComment>();
+  const duplicates: ExistingInlineComment[] = [];
+  for (const comment of [...opts.existing].sort((a, b) => a.id - b.id)) {
+    const previous = liveByFp.get(comment.fp);
+    if (previous) {
+      duplicates.push(previous);
+    }
+    liveByFp.set(comment.fp, comment);
+  }
+
+  const selected: Array<{ fp: string; finding: Finding }> = [];
+  for (const entry of ordered) {
+    if (selected.length >= opts.maxComments) {
+      break;
+    }
+    if (liveByFp.has(entry.fp)) {
+      selected.push(entry);
+    }
+  }
+  for (const entry of ordered) {
+    if (selected.length >= opts.maxComments) {
+      break;
+    }
+    if (!liveByFp.has(entry.fp)) {
+      selected.push(entry);
+    }
+  }
+
+  const plan: InlineSyncPlan = { create: [], patch: [], stub: [], remove: [] };
+  const selectedFps = new Set(selected.map((entry) => entry.fp));
+  for (const entry of selected) {
+    const live = liveByFp.get(entry.fp);
+    if (live) {
+      plan.patch.push({ comment: live, finding: entry.finding });
+    } else {
+      plan.create.push(entry);
+    }
+  }
+  for (const [fp, live] of liveByFp) {
+    if (selectedFps.has(fp)) {
+      continue;
+    }
+    if (!opts.teardown) {
+      continue;
+    }
+    if (live.hasReplies) {
+      plan.stub.push(live);
+    } else {
+      plan.remove.push(live);
+    }
+  }
+  // A duplicate with human replies is still a conversation: stub it like any other
+  // retired thread rather than deleting what people wrote in.
+  for (const duplicate of duplicates) {
+    if (duplicate.hasReplies) {
+      plan.stub.push(duplicate);
+    } else {
+      plan.remove.push(duplicate);
+    }
+  }
+  return plan;
+}
+
+/** `\r\n`-insensitive body comparison: the API returns CRLF-normalized bodies. */
+export function inlineBodiesEqual(a: string, b: string): boolean {
+  return a.replace(/\r\n/g, "\n") === b.replace(/\r\n/g, "\n");
+}
+
+/** Does a body's UNQUOTED text carry this marker? Quoted (`> `) lines are the
+ * replier quoting US, which is a genuine reply, not our comment. */
+export function hasUnquotedMarker(body: string, marker: string): boolean {
+  return body.split("\n").some((line) => !/^\s*>/.test(line) && line.includes(marker));
+}
+
+/**
+ * The findings the main comment renders in its ACTIVE list — not dismissed, not
+ * cleared by an applied reply, not requalified — which is exactly the inline sync's
+ * target set. Mirrors the isDropped/kept split in renderMarkdown and
+ * renderAggregateMarkdown (first record per fp wins, like matchedFeedback there).
+ * Exported for tests.
+ */
+export function activeFindings(
+  withFp: Array<{ finding: Finding; fp: string }>,
+  dismissed: DismissalRecord[],
+  records: FeedbackRecord[],
+): Array<{ finding: Finding; fp: string }> {
+  const dismissedFps = new Set(dismissed.map((record) => record.fp));
+  const appliedFps = new Set<string>();
+  const seen = new Set<string>();
+  for (const record of records) {
+    if (!seen.has(record.fp)) {
+      seen.add(record.fp);
+      if (record.applied) {
+        appliedFps.add(record.fp);
+      }
+    }
+  }
+  return withFp.filter(
+    ({ finding, fp }) => !dismissedFps.has(fp) && !appliedFps.has(fp) && !finding.requalifiedBy,
+  );
+}
+
+/** A per-render COPY of the link context carrying this run's inline thread URLs —
+ * the routed ci flow shares one LinkContext across reporters, so never mutate it. */
+function withInlineUrls(link: LinkContext, inlineUrls: Map<string, string>): LinkContext {
+  return inlineUrls.size > 0 ? { ...link, inlineUrls } : link;
+}
+
 // @ref LLP 0011#suppression-is-never-silent [implements] — a verdict carries only while BOTH the reply and the reviewed source are unchanged
 /**
 * Carry a decision already recorded in the prior comment state onto the freshly
@@ -490,16 +689,38 @@ export class GitHubReporter implements Reporter {
      ? applyPins(feedback, pinsIn)
      : await this.computeFeedback(withFp, priorRecords, pinsIn);
    const link = await this.linkContextAsync();
+    // Inline threads converge to the ACTIVE findings before the body renders, so
+    // the short form can link each one. A failed run (couldNotComplete) posts an
+    // empty findings list that proves nothing — additive-only, no teardown.
+    const inlineUrls = await this.syncInline(activeFindings(withFp, dismissed, records), link, {
+      teardown: review.couldNotComplete !== true,
+    });
    await this.upsertComment(
-      renderMarkdown(review, this.options.commentTag, dismissed, link, records, pins, inputHash),
+      renderMarkdown(
+        review,
+        this.options.commentTag,
+        dismissed,
+        withInlineUrls(link, inlineUrls),
+        records,
+        pins,
+        inputHash,
+      ),
    );
  }

-  /** Post/update the aggregate multi-scope comment (comment:'single' mode). */
+  /**
+   * Post/update the aggregate multi-scope comment (comment:'single' mode).
+   * `opts.inlineTeardown: false` marks a run whose result set is NOT the complete
+   * truth about the PR — a `--scopes` partial run carries the other scopes out of
+   * (possibly truncated) embedded state — so the inline sync must not stub/delete
+   * threads it merely cannot see. Any failed scope forces the same, since its
+   * findings list is empty without being clean.
+   */
  async reportAggregate(
    results: ScopeReviewResult[],
    unmatchedFiles: string[],
    feedback?: FeedbackRecord[],
+    opts?: { inlineTeardown?: boolean },
  ): Promise<void> {
    const existing = await this.findExistingComment();
    const state = existing ? parseReviewState(existing.body, this.options.commentTag) : null;
@@ -518,12 +739,18 @@ export class GitHubReporter implements Reporter {
      ? applyPins(feedback, pinsIn)
      : await this.computeFeedback(withFp, priorRecords, pinsIn);
    const link = await this.linkContextAsync();
+    const teardown =
+      (opts?.inlineTeardown ?? true) &&
+      results.every((result) => result.review.couldNotComplete !== true);
+    const inlineUrls = await this.syncInline(activeFindings(withFp, dismissed, records), link, {
+      teardown,
+    });
    await this.upsertComment(
      renderAggregateMarkdown(
        results,
        this.options.commentTag,
        dismissed,
-        link,
+        withInlineUrls(link, inlineUrls),
        { unmatchedFiles },
        records,
        pins,
@@ -698,10 +925,17 @@ export class GitHubReporter implements Reporter {
   * failed lookup gives, and under any other `dismiss` value nothing reads the flag.
   */
  private async replyComments(): Promise<ReplyComment[]> {
-    const [comments, ownLogin, prAuthor] = await Promise.all([
+    // Inline replies are read only when the reporter carries an ENABLED inline
+    // config: the `ecr feedback` crawl and every non-inline repo keep exactly the
+    // API footprint they had.
+    const inlineEnabled = this.options.inline?.enabled === true;
+    const [comments, ownLogin, prAuthor, reviewComments] = await Promise.all([
      this.fetchAllComments(),
      this.resolveOwnLogin(),
      feedbackNeedsPrAuthor(this.options.feedback) ? this.resolvePrAuthor() : null,
+      inlineEnabled
+        ? this.fetchAllReviewComments().catch(() => [] as ReviewCommentApi[])
+        : ([] as ReviewCommentApi[]),
    ]);
    const out: ReplyComment[] = [];
    for (const comment of comments) {
@@ -723,6 +957,64 @@ export class GitHubReporter implements Reporter {
        ...(comment.html_url ? { url: comment.html_url } : {}),
      });
    }
+    if (inlineEnabled && reviewComments.length > 0) {
+      // fp per OUR top-level inline comment (author + anchored marker), so a reply
+      // threading to it names its finding structurally.
+      const fpByRootId = new Map<number, string>();
+      if (ownLogin) {
+        for (const comment of reviewComments) {
+          if (comment.in_reply_to_id != null || comment.user?.login !== ownLogin) {
+            continue;
+          }
+          const fp = parseInlineMarkerFp(comment.body ?? "", this.options.commentTag);
+          if (fp) {
+            fpByRootId.set(comment.id, fp);
+          }
+        }
+      }
+      const byId = new Map(reviewComments.map((comment) => [comment.id, comment]));
+      // `in_reply_to_id` points at the thread root, but chase a short chain anyway
+      // so an unexpected reply-to-reply shape still resolves.
+      const threadFpOf = (comment: ReviewCommentApi): string | undefined => {
+        let parentId = comment.in_reply_to_id;
+        for (let hop = 0; parentId != null && hop < 5; hop++) {
+          const fp = fpByRootId.get(parentId);
+          if (fp) {
+            return fp;
+          }
+          parentId = byId.get(parentId)?.in_reply_to_id;
+        }
+        return undefined;
+      };
+      for (const comment of reviewComments) {
+        const login = comment.user?.login;
+        if (!login || (ownLogin && login === ownLogin)) {
+          continue;
+        }
+        const body = comment.body ?? "";
+        // Unquoted-line marker tests only: a GitHub "Quote reply" copies our marker
+        // behind `> ` and is a genuine human reply that must still be matched.
+        if (
+          hasUnquotedMarker(body, this.marker) ||
+          body.split("\n").some((line) => !/^\s*>/.test(line) && line.includes(":inline:fp="))
+        ) {
+          continue;
+        }
+        const threadFp = threadFpOf(comment);
+        out.push({
+          // NEGATED: PR-review-comment ids are an independent sequence from issue
+          // comments; negation keeps stored commentIds collision-free across streams
+          // (and applyPins refuses cross-stream pin-lift comparisons).
+          id: -comment.id,
+          body,
+          login,
+          maintainer: MAINTAINER_ASSOCIATIONS.has(comment.author_association ?? ""),
+          author: prAuthor != null && login === prAuthor,
+          ...(comment.html_url ? { url: comment.html_url } : {}),
+          ...(threadFp ? { threadFp } : {}),
+        });
+      }
+    }
    return out;
  }

@@ -748,6 +1040,35 @@ export class GitHubReporter implements Reporter {
    for (const comment of await this.ownComments()) {
      await this.deleteComment(comment.id);
    }
+    // Sweep this tag's inline threads too, gated on the config KEY being present
+    // (not on `enabled`), so a comment-mode switch or a later disable still cleans
+    // up — while callers that never wire `inline` (break-glass reporter, terminal
+    // failure notes) keep their zero-review-API footprint. A thread humans replied
+    // in is stubbed, never deleted. Fail-soft per thread.
+    if (this.options.inline !== undefined) {
+      let own: ExistingInlineComment[] = [];
+      try {
+        own = await this.ownInlineComments();
+      } catch {
+        return; // fail-soft: the main-comment clear above already happened
+      }
+      for (const comment of own) {
+        try {
+          if (comment.hasReplies) {
+            const stub = inlineStubBody(this.options.commentTag, comment.fp);
+            if (!inlineBodiesEqual(comment.body, stub)) {
+              await this.patchReviewComment(comment.id, stub);
+            }
+          } else {
+            await this.deleteReviewComment(comment.id);
+          }
+        } catch (error) {
+          process.stderr.write(
+            `inline sync: clear failed for one inline comment (skipped): ${errorMessage(error)}\n`,
+          );
+        }
+      }
+    }
  }

  /**
@@ -793,6 +1114,365 @@ export class GitHubReporter implements Reporter {
    return link;
  }

+  /**
+   * Fetch ALL PR review (inline) comments, paginating manually like
+   * fetchAllCommentsUncached. Unlike the issue-comments endpoint this one honors
+   * sort/direction, but a full scan is needed anyway (we reconcile every own
+   * thread), so the same oldest-first walk keeps the two fetchers uniform.
+   */
+  private async fetchAllReviewCommentsUncached(): Promise<ReviewCommentApi[]> {
+    const all: ReviewCommentApi[] = [];
+    const gh = await resolveTrustedTool("gh");
+    for (let page = 1; page <= GitHubReporter.MAX_COMMENT_PAGES; page++) {
+      const { stdout } = await run(
+        gh,
+        [
+          "api",
+          "-X",
+          "GET",
+          `repos/${this.options.repo}/pulls/${this.options.prNumber}/comments`,
+          "-f",
+          "per_page=100",
+          "-f",
+          `page=${page}`,
+        ],
+        { cwd: this.options.cwd },
+      );
+      let batch: ReviewCommentApi[];
+      try {
+        batch = JSON.parse(stdout) as ReviewCommentApi[];
+      } catch {
+        break;
+      }
+      if (!Array.isArray(batch) || batch.length === 0) {
+        break;
+      }
+      all.push(...batch);
+      if (batch.length < 100) {
+        break;
+      }
+    }
+    return all;
+  }
+
+  /** Shared-per-PR, TTL'd review-comments listing (see reviewCommentsByPr). */
+  private fetchAllReviewComments(): Promise<ReviewCommentApi[]> {
+    const key = prAuthorCacheKey(this.options.repo, this.options.prNumber, this.options.cwd);
+    const now = Date.now();
+    const cached = reviewCommentsByPr.get(key);
+    if (cached && now - cached.at <= GitHubReporter.COMMENTS_CACHE_TTL_MS) {
+      return cached.comments;
+    }
+    const comments = this.fetchAllReviewCommentsUncached().catch((error: unknown) => {
+      // Never cache a failure.
+      if (reviewCommentsByPr.get(key)?.comments === comments) {
+        reviewCommentsByPr.delete(key);
+      }
+      throw error;
+    });
+    reviewCommentsByPr.set(key, { at: now, comments });
+    return comments;
+  }
+
+  private invalidateReviewComments(): void {
+    reviewCommentsByPr.delete(
+      prAuthorCacheKey(this.options.repo, this.options.prNumber, this.options.cwd),
+    );
+  }
+
+  /**
+   * OUR live inline finding comments under THIS tag: top-level, authored by our
+   * own login (unspoofable), carrying the anchored byte-0 marker. Identity is
+   * author + marker exactly like selectOwnComments; an unresolved login returns
+   * nothing (fail closed). `hasReplies` is derived from the same listed snapshot.
+   */
+  private async ownInlineComments(): Promise<ExistingInlineComment[]> {
+    const [comments, ownLogin] = await Promise.all([
+      this.fetchAllReviewComments(),
+      this.resolveOwnLogin(),
+    ]);
+    if (!ownLogin) {
+      return [];
+    }
+    const repliedTo = new Set(
+      comments
+        .filter((comment) => comment.in_reply_to_id != null)
+        .map((comment) => comment.in_reply_to_id!),
+    );
+    const own: ExistingInlineComment[] = [];
+    for (const comment of comments) {
+      if (comment.in_reply_to_id != null || comment.user?.login !== ownLogin) {
+        continue;
+      }
+      const fp = parseInlineMarkerFp(comment.body ?? "", this.options.commentTag);
+      if (!fp) {
+        continue;
+      }
+      own.push({
+        id: comment.id,
+        fp,
+        body: comment.body ?? "",
+        ...(comment.html_url ? { url: comment.html_url } : {}),
+        hasReplies: repliedTo.has(comment.id),
+      });
+    }
+    return own;
+  }
+
+  /** The PR's CURRENT head OID, fetched live — or null. Used to refuse creates
+   * whose commit_id (the head this run reviewed) is no longer the head. */
+  private async liveHeadOid(): Promise<string | null> {
+    try {
+      const gh = await resolveTrustedTool("gh");
+      const { stdout } = await run(
+        gh,
+        [
+          "pr",
+          "view",
+          String(this.options.prNumber),
+          "--repo",
+          this.options.repo,
+          "--json",
+          "headRefOid",
+          "--jq",
+          ".headRefOid",
+        ],
+        { cwd: this.options.cwd },
+      );
+      return stdout.trim() || null;
+    } catch {
+      return null;
+    }
+  }
+
+  /** Secondary-rate-limit shapes (403/429): abort the rest of the sync, not just
+   * this mutation — hammering on would dig the hole deeper. */
+  private static isRateLimitError(error: unknown): boolean {
+    return /HTTP 403|HTTP 429|rate limit|secondary rate/i.test(errorMessage(error));
+  }
+
+  // @ref LLP 0008#github-reporter-identity [constrained-by] — inline threads are
+  // patched/deleted only when author + anchored marker both match; creates also require
+  // a resolved own login, or every run would duplicate what it cannot recognize
+  /**
+   * Converge this reporter's inline comments to `targets` (the ACTIVE, in-diff
+   * findings), returning fp → thread permalink for the live full-form threads.
+   * Never throws and never blocks the main comment: every failure degrades to
+   * "that finding renders full-form in the main comment".
+   *
+   * `teardown: false` marks a run whose target set may be INCOMPLETE — a failed
+   * review, a `--scopes` partial run, carried/truncated aggregate state — and makes
+   * the sync additive-only (see planInlineSync): a finding this run cannot see must
+   * not have its thread torn down.
+   *
+   * Creates require the reviewed head (`options.headSha`) to still BE the live head:
+   * after a mid-review push the diff we validated lines against no longer matches
+   * the commit we'd anchor to — a stale commit_id can silently pin the comment to
+   * the wrong code (or 422 wholesale after a force-push) — so creates are skipped
+   * and logged; patches/stubs/deletes are body-only and safe either way.
+   */
+  private async syncInline(
+    targets: Array<{ finding: Finding; fp: string }>,
+    link: LinkContext,
+    opts: { teardown: boolean },
+  ): Promise<Map<string, string>> {
+    const urls = new Map<string, string>();
+    const config = this.options.inline;
+    if (!config?.enabled || !link.diffLines) {
+      return urls;
+    }
+    const eligible = targets.filter(
+      ({ finding }) =>
+        finding.line != null && link.diffLines!.get(finding.file)?.has(finding.line) === true,
+    );
+    let existing: ExistingInlineComment[];
+    try {
+      existing = await this.ownInlineComments();
+      if (eligible.length > 0 && (await this.resolveOwnLogin()) == null) {
+        // Without an own login we cannot recognize our previous comments, so a
+        // create now would duplicate on every future run. Fail closed.
+        process.stderr.write(
+          "inline sync: could not resolve the posting identity; skipping inline comments this run.\n",
+        );
+        return urls;
+      }
+    } catch (error) {
+      process.stderr.write(
+        `inline sync: could not list review comments (findings render in the main comment): ${errorMessage(error)}\n`,
+      );
+      return urls;
+    }
+
+    const plan = planInlineSync({
+      targets: eligible,
+      existing,
+      maxComments: config.maxComments,
+      teardown: opts.teardown,
+    });
+
+    // One live-head check per sync, only when creating. A mismatch (or an unknown
+    // reviewed head) skips creates; everything body-only still runs.
+    let creates = plan.create;
+    if (creates.length > 0) {
+      const reviewedHead = this.options.headSha;
+      const live = reviewedHead ? await this.liveHeadOid() : null;
+      if (!reviewedHead || live !== reviewedHead) {
+        process.stderr.write(
+          `inline sync: PR head ${reviewedHead ? "moved during the review" : "is unknown"}; ` +
+            `skipping ${creates.length} new inline comment(s) this run.\n`,
+        );
+        creates = [];
+      }
+    }
+
+    const counts = { created: 0, patched: 0, stubbed: 0, deleted: 0, failed: 0 };
+    let aborted = false;
+    const attempt = async (fn: () => Promise<void>): Promise<void> => {
+      if (aborted) {
+        return;
+      }
+      try {
+        await fn();
+      } catch (error) {
+        counts.failed++;
+        if (GitHubReporter.isRateLimitError(error)) {
+          aborted = true;
+          process.stderr.write(
+            `inline sync: rate-limited; aborting remaining inline mutations this run: ${errorMessage(error)}\n`,
+          );
+        } else {
+          process.stderr.write(`inline sync: mutation failed (skipped): ${errorMessage(error)}\n`);
+        }
+      }
+    };
+
+    // Sequential on purpose: parallel content creation is what trips GitHub's
+    // secondary rate limit.
+    for (const { comment, finding } of plan.patch) {
+      if (comment.url) {
+        urls.set(comment.fp, comment.url);
+      }
+      const body = renderInlineCommentBody(finding, this.options.commentTag, comment.fp);
+      if (inlineBodiesEqual(comment.body, body)) {
+        continue;
+      }
+      await attempt(async () => {
+        await this.patchReviewComment(comment.id, body);
+        counts.patched++;
+      });
+    }
+    for (const entry of creates) {
+      await attempt(async () => {
+        const created = await this.createReviewComment(
+          renderInlineCommentBody(entry.finding, this.options.commentTag, entry.fp),
+          entry.finding.file,
+          entry.finding.line!,
+        );
+        counts.created++;
+        if (created?.html_url) {
+          urls.set(entry.fp, created.html_url);
+        }
+      });
+    }
+    for (const comment of plan.stub) {
+      const body = inlineStubBody(this.options.commentTag, comment.fp);
+      if (inlineBodiesEqual(comment.body, body)) {
+        continue;
+      }
+      await attempt(async () => {
+        await this.patchReviewComment(comment.id, body);
+        counts.stubbed++;
+      });
+    }
+    for (const comment of plan.remove) {
+      await attempt(async () => {
+        await this.deleteReviewComment(comment.id);
+        counts.deleted++;
+      });
+    }
+
+    const total = counts.created + counts.patched + counts.stubbed + counts.deleted + counts.failed;
+    if (total > 0) {
+      const summary =
+        `inline sync: ${counts.created} created, ${counts.patched} patched, ` +
+        `${counts.stubbed} stubbed, ${counts.deleted} deleted, ${counts.failed} failed`;
+      process.stderr.write(`${summary}\n`);
+      // Inline comments are mutated in place like the main comment, so this line is
+      // the only per-run record of what changed (mirrors upsertComment's mirror).
+      await appendStepSummary(`🤖 AI review — ${summary}`);
+    }
+    return urls;
+  }
+
+  private async createReviewComment(
+    body: string,
+    path_: string,
+    line: number,
+  ): Promise<{ html_url?: string } | null> {
+    this.invalidateReviewComments();
+    const gh = await resolveTrustedTool("gh");
+    const payload = JSON.stringify({
+      body,
+      commit_id: this.options.headSha,
+      path: path_,
+      line,
+      side: "RIGHT",
+    });
+    const dir = await mkdtemp(path.join(tmpdir(), "ecr-"));
+    const jsonPath = path.join(dir, "review-comment.json");
+    try {
+      await writeFile(jsonPath, payload, "utf8");
+      const { stdout } = await run(
+        gh,
+        [
+          "api",
+          "-X",
+          "POST",
+          `repos/${this.options.repo}/pulls/${this.options.prNumber}/comments`,
+          "--input",
+          jsonPath,
+        ],
+        { cwd: this.options.cwd },
+      );
+      try {
+        return JSON.parse(stdout) as { html_url?: string };
+      } catch {
+        return null;
+      }
+    } finally {
+      await rm(dir, { recursive: true, force: true });
+    }
+  }
+
+  private async patchReviewComment(commentId: number, body: string): Promise<void> {
+    this.invalidateReviewComments();
+    const gh = await resolveTrustedTool("gh");
+    await this.withBodyFile(body, (jsonPath) =>
+      run(
+        gh,
+        [
+          "api",
+          "-X",
+          "PATCH",
+          `repos/${this.options.repo}/pulls/comments/${commentId}`,
+          "--input",
+          jsonPath,
+        ],
+        { cwd: this.options.cwd },
+      ),
+    );
+  }
+
+  private async deleteReviewComment(commentId: number): Promise<void> {
+    this.invalidateReviewComments();
+    const gh = await resolveTrustedTool("gh");
+    await run(
+      gh,
+      ["api", "-X", "DELETE", `repos/${this.options.repo}/pulls/comments/${commentId}`],
+      { cwd: this.options.cwd },
+    );
+  }
+
  /**
   * Add or remove per-PR finding dismissals in the reviewer's comment and re-render
   * it in place — no re-review needed (the comment embeds the full review state). The
@@ -841,6 +1521,45 @@ export class GitHubReporter implements Reporter {
          state.inputHash,
        );
    await this.patchComment(existing.id, body);
+    // Additive-only inline updates for exactly the fps this action named — never a
+    // full stale sweep: the embedded state an aggregate stores may be TRUNCATED
+    // (renderAggregateMarkdown trims kept findings to fit GitHub's body cap), so
+    // "not in state" here does not mean "gone" and must not tear a thread down.
+    // Fail-soft: a dismissal must never fail on the inline layer.
+    if (this.options.inline?.enabled) {
+      try {
+        const own = await this.ownInlineComments();
+        const byFp = new Map(own.map((comment) => [comment.fp, comment]));
+        const findingById = stateFindingsById(state);
+        for (const fp of next.matched) {
+          const comment = byFp.get(fp);
+          if (!comment) {
+            continue;
+          }
+          const stub = inlineStubBody(this.options.commentTag, fp);
+          if (!inlineBodiesEqual(comment.body, stub)) {
+            await this.patchReviewComment(comment.id, stub);
+          }
+        }
+        for (const fp of remove) {
+          const comment = byFp.get(fp);
+          const finding = findingById.get(fp);
+          // A finding truncated out of the state (or a thread that was deleted) just
+          // renders full-form in the main comment until the next review re-creates it.
+          if (!comment || !finding) {
+            continue;
+          }
+          const full = renderInlineCommentBody(finding, this.options.commentTag, fp);
+          if (!inlineBodiesEqual(comment.body, full)) {
+            await this.patchReviewComment(comment.id, full);
+          }
+        }
+      } catch (error) {
+        process.stderr.write(
+          `inline sync: dismissal update skipped (main comment already updated): ${errorMessage(error)}\n`,
+        );
+      }
+    }
    return {
      dismissedCount: next.dismissed.length,
      matched: next.matched,
@@ -22,17 +22,26 @@ const DIRECT_PROVIDER_ORDER: readonly ProviderId[] = [
  "android-releases",
  "media3",
  "agp",
+  "android-ndk",
  "android",
  "glide",
  "okhttp",
  "kotlin-coroutines",
  "gradle",
  "jetbrains-issues",
+  "react",
+  "web-standards",
+  "chrome-devtools-protocol",
+  "flow",
+  "typescript",
+  "cmake",
+  "cocoapods",
  "react-native-reanimated",
  "react-native-gesture-handler",
  "react-native-screens",
  "react-native-worklets",
  "react-native",
+  "metro",
  "expo",
 ];

@@ -49,13 +58,22 @@ const DIRECT_SOURCE_KIND: Record<ProviderId, SourceKind> = {
  "kotlin-coroutines": "official-guide",
  gradle: "official-guide",
  agp: "release-notes",
+  "android-ndk": "official-guide",
  "jetbrains-issues": "issue-tracker",
  expo: "official-api",
+  react: "official-api",
  "react-native": "official-api",
+  "web-standards": "standard",
+  "chrome-devtools-protocol": "standard",
+  flow: "official-guide",
+  typescript: "official-guide",
+  cmake: "official-guide",
+  cocoapods: "official-guide",
  "react-native-reanimated": "official-guide",
  "react-native-gesture-handler": "official-guide",
  "react-native-screens": "official-guide",
  "react-native-worklets": "official-guide",
+  metro: "official-guide",
 };

 export interface DirectDocumentationTarget {
@@ -345,6 +345,10 @@ export const expoProvider = htmlProvider("expo", "react-native", "Expo documenta
  { hostname: "docs.expo.dev", prefixes: [""] },
 ]);

+export const reactProvider = htmlProvider("react", "react-native", "React documentation", [
+  { hostname: "react.dev", prefixes: ["/reference/react", "/reference/rules"] },
+]);
+
 export const reactNativeProvider = htmlProvider(
  "react-native",
  "react-native",
@@ -357,6 +361,66 @@ export const reactNativeProvider = htmlProvider(
  ],
 );

+export const webStandardsProvider = htmlProvider(
+  "web-standards",
+  "react-native",
+  "Web platform standards",
+  [
+    { hostname: "fetch.spec.whatwg.org", prefixes: [""] },
+    { hostname: "xhr.spec.whatwg.org", prefixes: [""] },
+    { hostname: "websockets.spec.whatwg.org", prefixes: [""] },
+    { hostname: "dom.spec.whatwg.org", prefixes: [""] },
+    { hostname: "streams.spec.whatwg.org", prefixes: [""] },
+    { hostname: "url.spec.whatwg.org", prefixes: [""] },
+    { hostname: "encoding.spec.whatwg.org", prefixes: [""] },
+    { hostname: "console.spec.whatwg.org", prefixes: [""] },
+    { hostname: "html.spec.whatwg.org", prefixes: ["/multipage"] },
+    {
+      hostname: "w3c.github.io",
+      prefixes: [
+        "/FileAPI",
+        "/hr-time",
+        "/performance-timeline",
+        "/resource-timing",
+        "/IntersectionObserver",
+      ],
+    },
+  ],
+);
+
+export const chromeDevtoolsProtocolProvider = htmlProvider(
+  "chrome-devtools-protocol",
+  "react-native",
+  "Chrome DevTools Protocol documentation",
+  [{ hostname: "chromedevtools.github.io", prefixes: ["/devtools-protocol"] }],
+);
+
+export const flowProvider = htmlProvider("flow", "react-native", "Flow documentation", [
+  { hostname: "flow.org", prefixes: ["/en/docs"] },
+]);
+
+export const typescriptProvider = htmlProvider(
+  "typescript",
+  "react-native",
+  "TypeScript documentation",
+  [{ hostname: "www.typescriptlang.org", prefixes: ["/docs"] }],
+);
+
+export const androidNdkProvider = htmlProvider(
+  "android-ndk",
+  "android",
+  "Android NDK documentation",
+  [{ hostname: "developer.android.com", prefixes: ["/ndk"] }],
+);
+
+export const cmakeProvider = htmlProvider("cmake", "android", "CMake documentation", [
+  { hostname: "cmake.org", prefixes: ["/cmake/help"] },
+]);
+
+export const cocoaPodsProvider = htmlProvider("cocoapods", "apple", "CocoaPods guides", [
+  { hostname: "guides.cocoapods.org", prefixes: ["/syntax", "/using"] },
+]);
+
 export const reactNativeReanimatedProvider = htmlProvider(
  "react-native-reanimated",
  "react-native",
@@ -431,6 +495,10 @@ export const reactNativeWorkletsProvider = htmlProvider(
  true,
 );

+export const metroProvider = htmlProvider("metro", "react-native", "Metro bundler documentation", [
+  { hostname: "metrobundler.dev", prefixes: [""] },
+]);
+
 const providers: Record<ProviderId, DocumentationProvider> = {
  apple: appleProvider,
  "apple-releases": appleReleasesProvider,
@@ -446,11 +514,20 @@ const providers: Record<ProviderId, DocumentationProvider> = {
  agp: agpProvider,
  "jetbrains-issues": jetbrainsIssuesProvider,
  expo: expoProvider,
+  react: reactProvider,
  "react-native": reactNativeProvider,
+  "web-standards": webStandardsProvider,
+  "chrome-devtools-protocol": chromeDevtoolsProtocolProvider,
+  flow: flowProvider,
+  typescript: typescriptProvider,
+  "android-ndk": androidNdkProvider,
+  cmake: cmakeProvider,
+  cocoapods: cocoaPodsProvider,
  "react-native-reanimated": reactNativeReanimatedProvider,
  "react-native-gesture-handler": reactNativeGestureHandlerProvider,
  "react-native-screens": reactNativeScreensProvider,
  "react-native-worklets": reactNativeWorkletsProvider,
+  metro: metroProvider,
 };

 export function getProvider(provider: ProviderId): DocumentationProvider {
@@ -71,10 +71,42 @@ const providerSearchDefinitions: Record<Exclude<ProviderId, "expo">, ProviderSea
    scopes: ["youtrack.jetbrains.com/issue"],
    sourceKind: "issue-tracker",
  },
+  react: {
+    scopes: ["react.dev/reference/react", "react.dev/reference/rules"],
+    sourceKind: "official-api",
+  },
  "react-native": {
    scopes: ["reactnative.dev"],
    sourceKind: "official-api",
  },
+  "web-standards": {
+    scopes: ["whatwg.org", "w3c.github.io"],
+    sourceKind: "standard",
+  },
+  "chrome-devtools-protocol": {
+    scopes: ["chromedevtools.github.io/devtools-protocol"],
+    sourceKind: "standard",
+  },
+  flow: {
+    scopes: ["flow.org/en/docs"],
+    sourceKind: "official-guide",
+  },
+  typescript: {
+    scopes: ["typescriptlang.org/docs"],
+    sourceKind: "official-guide",
+  },
+  "android-ndk": {
+    scopes: ["developer.android.com/ndk"],
+    sourceKind: "official-guide",
+  },
+  cmake: {
+    scopes: ["cmake.org/cmake/help/latest"],
+    sourceKind: "official-guide",
+  },
+  cocoapods: {
+    scopes: ["guides.cocoapods.org/syntax", "guides.cocoapods.org/using"],
+    sourceKind: "official-guide",
+  },
  "react-native-reanimated": {
    scopes: ["docs.swmansion.com/react-native-reanimated/docs"],
    sourceKind: "official-api",
@@ -91,6 +123,10 @@ const providerSearchDefinitions: Record<Exclude<ProviderId, "expo">, ProviderSea
    scopes: ["docs.swmansion.com/react-native-worklets/docs"],
    sourceKind: "official-api",
  },
+  metro: {
+    scopes: ["metrobundler.dev/docs"],
+    sourceKind: "official-guide",
+  },
 };

 export interface RemoteSearchOptions {
@@ -25,7 +25,7 @@ const queryGuidance =
  "Formulate short documentation queries from exact API symbols plus one behavior or constraint term. Good: `CameraView barcodeScannerSettings`, `NWPathMonitor pathUpdateHandler`, `GestureDetector simultaneous gestures`. Avoid questions, prose, package/import names, code snippets, literals, paths, credentials, and other sensitive context. If the first result is broad, retry with a narrower symbol or member name.";

 const providerGuidance =
-  "Provider map: apple=Apple SDK APIs and Human Interface Guidelines; apple-releases=Xcode and Apple platform release notes; swift-evolution=Swift Evolution proposals; sdwebimage=SDWebImage APIs and caching/loading behavior; android=Android, Jetpack, Compose, and Google Play services APIs; android-releases=Android platform releases and behavior changes; media3=Jetpack Media3; glide=Glide; okhttp=OkHttp; kotlin-coroutines=Kotlin coroutines; gradle=Gradle; agp=Android Gradle Plugin; jetbrains-issues=JetBrains YouTrack context; expo=Expo documentation; react-native=React Native core; react-native-reanimated=Reanimated; react-native-gesture-handler=Gesture Handler; react-native-screens=Screens; react-native-worklets=Worklets. Native source retains platform context: use apple/android for OS contracts and add the dependency provider for dependency-owned behavior; an Expo package path does not make a native API an Expo-docs query. Issue-tracker results are context, not API contracts.";
+  "Provider map: apple=Apple SDK APIs and Human Interface Guidelines; apple-releases=Xcode and Apple platform release notes; swift-evolution=Swift Evolution proposals; sdwebimage=SDWebImage APIs and caching/loading behavior; android=Android, Jetpack, Compose, and Google Play services APIs; android-releases=Android platform releases and behavior changes; android-ndk=Android NDK; media3=Jetpack Media3; glide=Glide; okhttp=OkHttp; kotlin-coroutines=Kotlin coroutines; gradle=Gradle; agp=Android Gradle Plugin; jetbrains-issues=JetBrains YouTrack context; expo=Expo documentation; react=React APIs and semantics; react-native=React Native core documentation; web-standards=WHATWG and W3C web platform standards; chrome-devtools-protocol=Chrome DevTools Protocol; flow=Flow type-system documentation; typescript=TypeScript declaration semantics; cmake=CMake build-system documentation; cocoapods=CocoaPods integration guides; react-native-reanimated=Reanimated; react-native-gesture-handler=Gesture Handler; react-native-screens=Screens; react-native-worklets=Worklets; metro=Metro bundler. Native source retains platform context: use apple/android for OS contracts and add the dependency, build-tool, type-system, or web-contract provider for behavior that source owns; repository ownership does not make a native API a React Native or Expo documentation query. Standards describe compatibility targets; confirm the reviewed implementation claims that target before applying them. Issue-tracker results are context, not API contracts.";

 export interface DocumentationServerOptions {
  braveApiKey?: string;
@@ -84,7 +84,9 @@ export async function createDocumentationServer(options: DocumentationServerOpti
          .min(1)
          .max(SOURCE_KINDS.length)
          .optional()
-          .describe("Optional provenance classes to search"),
+          .describe(
+            "Optional provenance classes to search; standard denotes an external compatibility specification rather than an implementation-specific API page",
+          ),
      },
      annotations: {
        readOnlyHint: true,
@@ -18,11 +18,20 @@ export const PROVIDERS = [
  "agp",
  "jetbrains-issues",
  "expo",
+  "react",
  "react-native",
+  "web-standards",
+  "chrome-devtools-protocol",
+  "flow",
+  "typescript",
+  "android-ndk",
+  "cmake",
+  "cocoapods",
  "react-native-reanimated",
  "react-native-gesture-handler",
  "react-native-screens",
  "react-native-worklets",
+  "metro",
 ] as const;

 export type ProviderId = (typeof PROVIDERS)[number];
@@ -30,6 +39,7 @@ export type ProviderId = (typeof PROVIDERS)[number];
 export const SOURCE_KINDS = [
  "official-api",
  "official-guide",
+  "standard",
  "release-notes",
  "issue-tracker",
 ] as const;
@@ -7,7 +7,7 @@ alwaysRun: true
 # default model. Scoped to this one agent to limit the extra latency/rate-limit cost;
 # subdivide-on-timeout + the per-fetch deadline keep a slow Opus pass from hanging.
 # @ref LLP 0009#config-and-prompt-templates [implements]
-model: anthropic/claude-opus-5
+model: anthropic/claude-opus-5-5
 ---

 # Security & secrets
@@ -84,7 +84,7 @@ jobs:
      # The anthropic/… models run through the Claude Code CLI (claude-code
      # engine). Pinned exactly — see workflow.yml (expo-code-review.yml).
      - name: Install Claude Code CLI
-        run: npm install -g @anthropic-ai/[email protected]12
+        run: npm install -g @anthropic-ai/[email protected]80

      # SECURITY: the base-ref checkout includes every .expo-code-review/ config,
      # whose auth.tokenEnv names the forwarded model credential. `ecr verify-config`
@@ -110,6 +110,8 @@ jobs:
          # Anthropic review credential — the env var named by auth.tokenEnv in
          # config.jsonc (see workflow.yml for the accepted token shapes).
          CLAUDE_CODE_REVIEW_SHARED_API_TOKEN: ${{ secrets.CLAUDE_CODE_REVIEW_SHARED_API_TOKEN }}
+          # Muse alternative (also set ECR_EXPECTED_TOKEN_ENV=META_API_KEY):
+          # META_API_KEY: ${{ secrets.META_API_KEY }}
          # Optional search-only credential for trusted platform documentation research.
          BRAVE_SEARCH_API_KEY: ${{ secrets.BRAVE_SEARCH_API_KEY }}
          # Optional: override the model for every agent.
@@ -126,6 +128,8 @@ jobs:
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
        with:
          name: review-run-log-pr${{ github.event.issue.number }}
-          path: .expo-code-review/.runs/reviews.jsonl
+          path: |
+            .expo-agents/code-review/.runs/reviews.jsonl
+            .expo-code-review/.runs/reviews.jsonl
          if-no-files-found: ignore
          retention-days: 14
@@ -115,7 +115,7 @@ jobs:
      # engine). Pinned exactly — see workflow.yml (expo-code-review.yml).
      - name: Install Claude Code CLI
        if: steps.cmd.outputs.run == 'true'
-        run: npm install -g @anthropic-ai/[email protected]12
+        run: npm install -g @anthropic-ai/[email protected]80

      # SECURITY: the base-ref checkout above includes every .expo-code-review/
      # config.jsonc + routing.jsonc, whose auth.tokenEnv names the env var the CLI
@@ -148,6 +148,8 @@ jobs:
          # by `claude setup-token`, or an `sk-ant-api…` Console key (the Claude
          # Code CLI reads either).
          CLAUDE_CODE_REVIEW_SHARED_API_TOKEN: ${{ secrets.CLAUDE_CODE_REVIEW_SHARED_API_TOKEN }}
+          # Muse alternative (also set ECR_EXPECTED_TOKEN_ENV=META_API_KEY):
+          # META_API_KEY: ${{ secrets.META_API_KEY }}
          # Optional search-only credential for trusted platform documentation research.
          BRAVE_SEARCH_API_KEY: ${{ secrets.BRAVE_SEARCH_API_KEY }}
          # Optional: override the model for every agent.
@@ -181,6 +183,8 @@ jobs:
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
        with:
          name: review-run-log-pr${{ github.event.issue.number }}
-          path: .expo-code-review/.runs/reviews.jsonl
+          path: |
+            .expo-agents/code-review/.runs/reviews.jsonl
+            .expo-code-review/.runs/reviews.jsonl
          if-no-files-found: ignore
          retention-days: 14
@@ -5,13 +5,13 @@
  // below for the credential. Override per-agent via frontmatter in the agent's
  // markdown, or at runtime with the REVIEWER_MODEL env var
  // (e.g. REVIEWER_MODEL=anthropic/claude-haiku-4-5).
-  "model": "anthropic/claude-sonnet-5",
+  "model": "anthropic/claude-opus-5-5",

  // Agents: every markdown file in agents/ is one reviewer (id = filename).
  // Add or remove files to change the roster — no list needed here.
  // shared.md (prepended to every agent + coordinator) and coordinator.md are
  // reserved filenames. Per-agent overrides go in each file's YAML frontmatter,
-  // e.g. `---\nmodel: anthropic/claude-opus-5\n---`.
+  // e.g. `---\nmodel: anthropic/claude-opus-5-5\n---`.

  // @ref LLP 0009#config-and-prompt-templates [implements] — suggestions off by default, not a schema limit
  "policy": {
@@ -86,6 +86,13 @@
  //              store the key as a repo secret and pass it under that env var.
  //   "auth": { "mode": "api-key", "provider": "openai", "tokenEnv": "OPENAI_API_KEY" }
  //
+  //   Muse Spark via the public Meta Model API Responses endpoint:
+  //   set models to `meta/muse-spark-1.3` and configure:
+  //   "auth": { "providers": {
+  //     "meta": { "mode": "api-key", "tokenEnv": "META_API_KEY" }
+  //   } }
+  //   Map META_API_KEY in the workflows and set ECR_EXPECTED_TOKEN_ENV to match.
+  //
  //   ChatGPT/Codex subscription ("oauth"): tokenEnv holds the ACCESS token from
  //   an `opencode auth login` ChatGPT sign-in — `ecr setup-auth` extracts it.
  //   NEVER share the refresh token: it is single-use and dies on first rotation.
@@ -153,4 +160,20 @@
  //   "protectedCategories": ["secrets", "security"],
  //   "maxAdjudications": 10                        // cap on model calls per run
  // }
+
+  // Inline PR comments (ROOT-ONLY, off by default). When enabled, each finding
+  // anchored to a line in the PR diff is posted as an inline review comment on
+  // that line (full rationale/suggestion there), and the main comment renders it
+  // short — title, links, a one-line rationale — with a link to the thread. The
+  // main comment stays the single source of truth (state, /dismiss, replies).
+  // Threads update in place across re-reviews; a retired thread with human
+  // replies is stubbed, never deleted. Replies on inline threads are matched to
+  // their finding like main-comment replies (same clearing rules).
+  // NOTE: the first enabled run on a PR sends one notification per created
+  // inline comment — `maxComments` bounds that. Disabling later leaves existing
+  // threads up until a comment-mode switch (or manual cleanup) clears them.
+  // "inline": {
+  //   "enabled": false,
+  //   "maxComments": 20   // per PR (single comment mode) / per scope (per-scope mode)
+  // }
 }
@@ -5,7 +5,7 @@
 # than the small serial-tail latency it adds (no repo tools, one bounded pass).
 # Override with a cheaper model if you'd rather trade decision quality for latency.
 # @ref LLP 0009#config-and-prompt-templates [implements]
-model: anthropic/claude-opus-5
+model: anthropic/claude-opus-5-5
 ---

 # Coordinator — consolidation & decision
@@ -4,7 +4,7 @@
 {
  // Default model for every agent in this scope. Override per-agent via frontmatter,
  // or at runtime with REVIEWER_MODEL.
-  "model": "anthropic/claude-sonnet-5",
+  "model": "anthropic/claude-opus-5-5",

  // Agents: every markdown file in agents/ beside this file is one reviewer for this
  // scope (id = filename). shared.md + coordinator.md are this scope's prompts.
@@ -72,7 +72,7 @@ jobs:
      # would silently drift on every CI run; bump it deliberately. Remove this
      # step if you switch every model to an OpenCode-served provider.
      - name: Install Claude Code CLI
-        run: npm install -g @anthropic-ai/[email protected]12
+        run: npm install -g @anthropic-ai/[email protected]80

      # SECURITY: the TRUSTED BASE checkout above includes every
      # .expo-code-review/config.jsonc + routing.jsonc, whose auth.tokenEnv names the
@@ -114,6 +114,8 @@ jobs:
          # by `claude setup-token`, or an `sk-ant-api…` Console key (the Claude
          # Code CLI reads either).
          CLAUDE_CODE_REVIEW_SHARED_API_TOKEN: ${{ secrets.CLAUDE_CODE_REVIEW_SHARED_API_TOKEN }}
+          # Muse alternative (also set ECR_EXPECTED_TOKEN_ENV=META_API_KEY):
+          # META_API_KEY: ${{ secrets.META_API_KEY }}
          # Optional search-only credential for trusted platform documentation research.
          BRAVE_SEARCH_API_KEY: ${{ secrets.BRAVE_SEARCH_API_KEY }}
          # Optional: override the model for every agent.
@@ -131,6 +133,8 @@ jobs:
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
        with:
          name: review-run-log-pr${{ github.event.pull_request.number }}
-          path: .expo-code-review/.runs/reviews.jsonl
+          path: |
+            .expo-agents/code-review/.runs/reviews.jsonl
+            .expo-code-review/.runs/reviews.jsonl
          if-no-files-found: ignore
          retention-days: 14
Author	SHA1	Message	Date
Brent Vatne	75fccfe3f4	fix: strip HTML tags from the inline-finding excerpt in the main comment The short-form excerpt escaped every <, so a model-written <br> showed as literal text. Remove HTML formatting tags first, then escape what is left.	2026-10-01 16:28:09 -07:00
Brent VatneandClaude Opus 5.5	621c354568	fix: load only the granted read tools in Claude Code review passes `--permission-mode dontAsk` rejects only tools that ask for permission. Against Claude Code 2.1.280, a review pass could still run EnterWorktree (it created a git worktree), RemoteTrigger (it listed the logged-in account's cloud routines), SendMessage, and Skill, because none of them is on the deny list and none asks for permission. buildClaudeArgs now passes `--tools` with exactly the granted read tools (`Read,Grep,Glob` or fewer, and "" for the coordinator). The CLI loads only those built-ins, so a tool a future CLI version adds is never loaded. MCP tools and the StructuredOutput tool used by --json-schema stay loaded. The scoped allow rules, dontAsk, and ALWAYS_DENIED_TOOLS stay as inner layers. Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>	2026-09-24 10:03:50 -07:00
Brent VatneandClaude Opus 5.5	3af45ebf84	feat: default to Claude Opus 5.5 and install Claude Code 2.1.280 The scaffolded default model moves from anthropic/claude-sonnet-5 to anthropic/claude-opus-5-5, and the security and coordinator pins move from claude-opus-5 to claude-opus-5-5. Claude Code 2.1.212 rejects Opus 5.5 ("version 2.1.280 or newer is required"), so every workflow template installs 2.1.280. The CLI bump re-checked the deny list: 2.1.280 adds ListAgents, which is now in ALWAYS_DENIED_TOOLS; every other denied name stays hidden. Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>	2026-09-23 11:34:00 -07:00
Peter Abbondanzo	65ffc81014	feat: add Muse Spark 1.3 support (#77 )	2026-09-06 15:52:03 -07:00
Brent Vatne	92257f9bc9	Setup dir moves to .expo-agents/code-review; .expo-code-review stays supported One .expo-agents/ directory now holds every Expo agent tool's per-repo files (this tool's and @expo/verify's) instead of one root dot directory per tool. Every lookup — root, scopes, the config-file sweep, the reference index, the .runs log — takes the new name first and falls back to the legacy .expo-code-review/, and ecr init reuses an existing legacy directory rather than doubling it. The CI templates upload reviews.jsonl from either location. This repo's own setup dir moved.	2026-08-25 23:06:35 -07:00
Brent Vatne	047d360b1b	test: deflake the process-group kill test on loaded CI runners kill(pid, 0) succeeds while the killed grandchild is still a zombie awaiting init's reap — the direct sh dies first, the orphaned sleep reparents, and reaping is asynchronous. Fast machines won that race; loaded release runners lost it twice (v0.14.1, v0.14.2). Poll until the pid is gone or its ps state is Z, bounded at 5s — a sleep 30 that genuinely survived the group kill still fails the assertion.	2026-08-21 13:09:44 -07:00
Brent Vatne	813859b6cf	feat: post inline PR comments for in-diff findings Findings anchored to a line in the PR diff are posted as inline review comments on that line (full rationale/sources/suggestion there); the main comment renders them short — title, links, one-line rationale — with a link to the thread. The main comment stays the single durable state store. - Root-only config: inline { enabled: false, maxComments: 20 } - Per-finding byte-0 marker + author = thread identity; threads patch in place, sticky cap never evicts a live thread, retired threads with human replies are stubbed (neutral text), bare ones deleted - Teardown only when the target set is provably complete: failure reviews now set couldNotComplete, --scopes partial runs and /dismiss re-renders are additive-only (truncated aggregate state cannot prove a finding gone) - Inline replies feed author feedback via threadFp (matches in every match mode; clearing still requires the unquoted id: token); review-comment ids are stored negated to stay collision-free vs issue-comment ids, with magnitude-within-stream recency and a cross-stream pin-lift refusal - hasUnquotedInlineMarker backstop keeps our own inline bodies (which carry an unquoted id: token) from ever matching as replies; quoted copies still count as genuine quote-replies - Creates verify the live PR head, mutations run sequentially, 403/429 aborts the sync, every sync writes a step-summary audit line Design + adversarial review record: PLAN-inline-comments.md	2026-08-21 12:38:34 -07:00
Brent Vatne	26acefef90	feat(research): add React Native contract providers (#76 )	2026-08-20 21:10:04 -07:00
Brent Vatne	36dd50772a	feat: add metrobundler.dev as a metro research provider	2026-08-14 18:34:15 -07:00
Brent Vatne	d993621e62	feat: parse thinking tokens from CLI usage into tokens.reasoning	2026-08-14 18:34:15 -07:00
Peter Abbondanzo	d4ed1157cc	feat: add Muse Spark support (#75 )	2026-08-12 20:22:23 -07:00
Brent Vatne	5c5b366d66	docs: explain what ecr solves over a bare `claude -p` review workflow, incl. the security model	2026-08-10 16:01:39 -07:00
Brent Vatne	17aaf2aef9	feat: render clean decisions as "Ready for human review" instead of "Approve"	2026-08-10 13:28:14 -07:00
Brent Vatne	e1591cec67	docs: condense the README into a scannable overview linking to llp/ explainers	2026-08-10 13:28:14 -07:00
Brent Vatne	ba9bbd79ad	Let routed CI cache researched reviews too, from one shared policy (#74 )	2026-08-08 18:44:00 -07:00