Compress encodes data with the named codec. "none" returns data unchanged.

ConfidenceScore is a CHEAP, PURE heuristic that scores how confident a cascade rung's answer text looks, in [0,1]. Lower = less confident = should esc

DecompressLimit reverses Compress while refusing to produce more than maxBytes of plaintext. The limit is applied while decoding gzip and through zstd

DefaultCorpusLimits returns conservative local-import bounds.

Exists reports whether key is present.

ExtractCompressible is exported so Azure OpenAI and OpenAI-compatible adapters can reuse the identical wire grammar without changing provider identity

ExtractProviderUsage extracts cache counters and total input tokens from one complete, non-streaming provider response. Duplicate keys, missing totals

Forget deletes a memory by id and atomically repairs neighboring lineage pointers. Expired predecessors stay expired: deleting a current version means

FromEnv builds a Store from the S3_* environment variables. It returns (nil, nil) when S3_ENDPOINT is unset outside production. Production requires ob

FrozenLevers returns this session's frozen levers in a stable order, for the x-caveman-tripwire disclosure header.

List returns all keys under prefix (used by retention + ZDR assertions).

New constructs the Vertex adapter. baseURL is the aiplatform endpoint; in production it is a Vertex host (e.g. https://us-central1-aiplatform.googleap

New parses the private key, validates the base URL, and builds the App. It returns an error (not a half-built App) on any misconfiguration, so callers

NewChecked validates configuration at construction time. New preserves its original one-result API but stores the same configuration error and makes a

NewQueryClient returns an *http.Client bounded for ClickHouse queries/DDL.

NormalizeTerms bounds query metadata before it can enter CCR or ranking.

Probe proves the operations production retention needs instead of accepting a syntactically valid but unusable bucket configuration. The random probe

Probe verifies live key access without persisting tenant data.

ResolveEnvironmentSecret loads a boot-time secret. In production plaintext environment variables are rejected: operators must provide a base64-encoded

RunCorpus evaluates one validated public corpus across provider compilers.

RunManifestWithQuality is RunManifest plus the LLM-in-the-loop quality layer. The runner is injected so CI can use a deterministic local runner while

Send authenticates and sends one bounded provider request without retry.

Shutdown closes the attached browser process. Ordinary Close only releases this driver context; direct CLI mode deliberately leaves its detached Chrom

SocketPath returns a per-install named-pipe path shared with Node adapters.

SocketPath returns the user-local normalized hook socket. Host adapters never choose this path, preventing one integration from impersonating another

SplitLineNumberedListing reports whether input is a line-numbered file listing. On success it returns the source text with gutters removed and the lin

Summary aggregates the in-memory recoveries into totals + per-type buckets.

Accept JSON integers only; reject bools, floats, strings, and negatives.

Describe the first-party Bedrock gateway surface. Runtime is the default. Mantle is an explicit opt-in descriptor. This method perfor

buildAdapters constructs the provider adapters. Anthropic, OpenAI, and Gemini always get sensible public defaults so a bare `caveman start` works. Bed

buildChain appends rows the way the two writers do: prev = last row_hash, seq+1.

cacheStatusFor maps observed usage to a cache_status. It only asserts hit/miss when the provider actually reported cache telemetry; otherwise it stays

captureProxyServer is the standard proxy wiring these tests drive through the real handler: one adapter, a socket-free upstream, no compressor.

Read this project's Cave Plan machine-readably (``GET /sdk/v1/cave-plan``). Authed by the project key's ``plan:read`` scope. Returns the

compileOrgRules validates and canonically orders the tenant's rules, and returns a fingerprint of them for RuleSetHash.

configTaxPerTurn is the token tax loaded on every turn: CLAUDE.md (user + project) + the skill catalog. Hooks/plugins are reported as counts, not fold

Reverse a checkpoint ``source_ref`` back into the original context. GETs ``/sdk/v1/checkpoints/{source_ref}/expand``; the gateway returns the