Encrypt seals plaintext with AES-256-GCM and a fresh random nonce, returning nonce(12) || ciphertext+tag as raw bytes.

HashPayload returns the lowercase hex SHA-256 of a request body, as required for the X-Amz-Content-Sha256 header and the canonical request.

NewNamed builds a dedicated OpenAI-compatible upstream mounted at compat/<name>/. The provider enum intentionally stays openai_compatible so usage/cos

NewTabular returns the deterministic CSV, TSV, and Markdown-table compressor.

Rewrite condenses req.StepBytes, or explains why it did not. Gate 1 (invocation) skips the API call entirely when the step is at or under θ tokens. G

TransformGemini rewrites a Gemini generateContent body (contents[].parts[], systemInstruction). err != nil OR info.ImageCount == 0 means the caller MU

estimateTokens is the project's inferred token heuristic (bytes/4), matching the usage importer's roughJSONSize/4 convention. Conservative, determinis

flush blocks until every record queued before the call has been written. It exists so tests can assert against the files; the request path never calls

predictPath builds a native Vertex prediction path under the /vertex prefix.

readCaptures reads every capture in dir, sorted by seq, and verifies each stored body against the hash the file itself recorded. A capture that cannot

BuildLearnPlan is the front-door analyzer: scan config + real history, compute the detectors, the Cave Score, rank by tokens/day, and persist sinks. R

LeverAllowed reports whether a lever may run for this session. An empty session id, a nil ledger, and an unknown session all allow it — the tripwire o

List returns every catalog entry so callers can serve the real, complete model catalog — provider/model/capabilities — instead of a hardcoded subset.

Observe records one completed call against a session and evaluates the harm tripwire. active is the set of levers that ran on THIS request; the return

ValidateURL resolves raw to a URL, validates the scheme/port constraints, and checks every IP the hostname resolves to against the SSRF block lists. I

bigStep is comfortably over the default θ so the invocation gate opens.

* Shared bounded transport for every SDK request. * * The explicit abort race is intentional: callers still settle on deadline when * a custom fetc

Classify a file as 'natural_language', 'code', 'config', or 'unknown'. Returns: One of: 'natural_language', 'code', 'config', 'unknown'

markedTurnConversation builds the Claude Code request shape for a conversation of n user turns: every user turn carries a cache_control breakpoint (Cl

record prices the request from the catalog and writes one truthful row to the sink. Standalone savings are always labeled "inferred".

Search the full catalog via the gateway's ``/sdk/v1/tool-search`` endpoint. Returns a :class:`ToolSearchResult` with the reduced tool list

AtlasRank binary-searches the sorted codepoint table; -1 when absent.

CandidateTraceKey preserves the v2 provider:model key for model-only actions and adds explicit effort for v3 actions. It is human-readable telemetry;

DefaultScenario returns 128-turn agent workload used by golden benchmark.

Error wraps an error's message through String redaction and returns a new string safe for inclusion in logs or HTTP error responses. The original err

IsProduction reports whether CAVE_ENV selects the managed production posture. Empty and unknown values remain local; only the canonical value (folded

ManagedConfig returns a Config with ManagedMode enabled and no allowlist.

Name identifies the counting basis (e.g. the encoding name) for display and cross-surface parity.

New validates configuration and returns immutable client.

NewServer builds a server over the given ordered tool set. log must write to stderr (never stdout); if nil, logging is discarded. The server name is r

NewTOON returns the lossless TOON re-encoder. It is reached only by forcing Options.Type = "toon"; Detect never routes to it.

PriceForRegion returns only an exact provider+model+region catalog row. It is the runtime billing lookup for region-sensitive Bedrock and Vertex calls

RememberReplacement durably records original→replacement and returns the AUTHORITATIVE bytes for that original — the caller must forward what comes ba

Serve runs the JSON-RPC loop until in reaches EOF. Framing is line-delimited (the MCP stdio contract): one JSON message per line, each response one co

Summary returns aggregate spend across all recorded requests. The savings basis is "inferred" whenever any row carries a non-`verified` basis, which i

claudeCodeConversation is a multi-turn Claude Code shaped request: a stable system field, static tools, cache_control breakpoints planted mid-conversa

* POST buffered spans to standard OTLP/HTTP `{baseURL}/v1/traces`. * Returns ExportTraceServiceResponse JSON. No-op when nothing is buffered.

newBodyCapture returns nil when capture is off, so the hot path costs one nil check. A directory that cannot be created disables capture rather than f

Return True if the file is natural language and should be compressed.

summarizeElided renders the facts that hold across every unit of one elided run, or "" when there are none, extraction found no structure, or the summ

tlsClientConfig builds the ClickHouse TLS configuration from the environment, or (nil, nil) when no CLICKHOUSE_TLS_* knob is set — in which case calle