refactor(repo): resolve changed-code audit

packages/cli/src/commands/render/execute.ts

@@ -33,6 +33,8 @@ export interface RenderExecutionDependencies {
   checkResolution: ResolutionPreflight;
 }
 
+// Exported only through render.ts so command tests can lock the user-facing guidance.
+// fallow-ignore-next-line unused-export
 export function renderLintContinuationHint(strictErrors: boolean): string {
   return strictErrors
     ? "  Continuing render despite lint warnings. Use --strict-all to block warnings."
@@ -156,6 +158,7 @@ async function ensureRenderBrowser(plan: RenderPlan): Promise<string> {
   }
 }
 
+// fallow-ignore-next-line complexity
 async function runRenderLint(plan: RenderPlan): Promise<void> {
   // lintProject's explicit-entry contract is an absolute source path;
   // entryFile remains project-relative for the producer.

packages/cli/src/commands/render/plan.ts

@@ -454,6 +454,8 @@ export function renderOutputDirectory(plan: RenderPlan): string {
 }
 
 /** Resolve browser GPU mode from Docker, CLI, env, then the auto default. */
+// Re-exported by render.ts to preserve its tested public seam.
+// fallow-ignore-next-line unused-export
 export function resolveBrowserGpuForCli(
   useDocker: boolean,
   browserGpuArg: boolean | undefined,

packages/cli/src/commands/render/present.ts

@@ -5,6 +5,8 @@ import { c } from "../../ui/colors.js";
 import type { RenderPlan } from "./plan.js";
 
 /** Present warnings and the human render plan. JSON batch output stays silent. */
+// This phase intentionally owns every mutually exclusive human-output branch.
+// fallow-ignore-next-line complexity
 export async function presentRenderPlan(plan: RenderPlan): Promise<void> {
   await presentRenderWarnings(plan);
   if (plan.effectiveQuiet || plan.batchPath) return;