AgentEvidenceForBuild returns all requests for one exact session/build/plan tuple in provider-call order. Partial or malformed identity fails closed.

BaseURL returns the configured base URL for a provider, or the supplied default.

CapabilityManifest returns canonical compact JSON. RegistrySHA256 hashes the ordered capabilities only, avoiding a self-referential digest.

ComputeFrozenCount returns the first mutable message index. It mirrors headroom's cache-control floor: the highest message index whose content block c

DecryptPayloadKey unwraps an artifact data-encryption key. KMS envelopes are restricted to the configured payload key plus the explicit legacy secrets

DefaultTraceReadLimits supports public-corpus traces while bounding retained memory.

DoToken issues an authenticated GitHub REST call with an installation token and returns the status + raw body for the caller to parse. It is the reusa

EncryptPayloadKey wraps an artifact data-encryption key. Production uses the dedicated payload KEK; local development retains the same AES-GCM envelop

ExtractToolCatalog returns the exact serialized bytes of a request's top-level tool catalog plus a reassembler that splices replacement bytes back int

Fraction maps the ordered key list onto a stable value in [0, 1). The same keys always yield the same fraction; keys are length-prefixed so no two dis

GetMetadata returns optional compressor metadata stored with a handle. A known handle with no metadata returns nil, nil; an unknown handle returns Err

IsReportProjectionOnlyOpportunity identifies observations admitted by the dedicated report API but excluded from Cave Plan, scoring, proposals, and ev

ListPriceEligible separates authentication safety from payment semantics. OAuth stays lossless/stealth at the forwarding layer, but Google Cloud Verte

MarkRawUsageIncomplete stamps RawUsage when a parser has just zeroed a typed counter because the stream ended without its terminal usage event. Witho

MintInstallationToken POSTs /app/installations/{id}/access_tokens narrowed to `repos` and `perms`, returning a ~1h token. Defaults (perms nil) are con

NewSearchResult returns the line-oriented search-result compressor.

NewServerVersion builds a server whose MCP initialize response carries the caller's build-stamped version. Command binaries use this constructor so th

Open reverses Seal: it unwraps the data key from metadata and decrypts the ciphertext. An unknown scheme fails closed.

OptimizerEnabled reports whether the named optimizer is enabled by policy.

ParseVerificationCommandOutput validates and binds external grader evidence.

PrepareSQLitePathCanonical secures path and returns the one canonical path callers must use for every subsequent open and sidecar check. Returning the

PricingMultiplier returns a positive model/region pricing capability from an exact catalog row. A missing or malformed capability is unavailable; call

ProjectGemini wraps the complete GenerateContentRequest so system instructions and function declarations are counted with the prompt.

PurgeObject removes every version when supported, falling back to ordinary deletion only for non-versioned test/self-hosted backends.

ReadObservationJSONL reads observation records under default limits.

ReadTraceJSONLWithLimits reads strict trace JSONL under explicit resource limits.

Recover returns the exact original bytes for a handle minted by Shrink. It reads the same durable store Shrink wrote (CAVEMAN_CCR_DB / ~/.caveman/ccr.

Recover returns the byte-exact original for a recall hit's recovery handle.

Register adds a compressor, keyed by its content type. A later registration for the same type replaces the earlier one.

Render formats concise human-readable benchmark result.

ReportOnlyOpportunityContractFor resolves the exact report projection contract. Unknown ids fail closed.

ResolveDensityDraw resolves a reader model + level to its drawable geometry, applying ResolveDensity's fail-closed model gating (an unrecognised model

RestoreLineNumberedListing puts the gutter back on a compressed listing. Compression removes lines, so output line N is not source line N. Renumberin

RetrieveMetadata returns optional compressor metadata stored beside a recovery handle. The raw Retrieve path remains byte-exact and never returns this

RetryOnBusy runs fn, retrying while SQLite reports the database is locked (SQLITE_BUSY). Short-lived local processes can initialize the same database

RowHash computes the pinned canonical row hash: row_hash = "sha256:" + hex(SHA256( prev_hash || "|" || seq || "|" || action || "|" || canonica

Run processes one host callback. Adapter failures deliberately emit nothing and return nil: host command continues unchanged.

RunSimulated evaluates deterministic agent workload without provider calls.

Sampled reports whether the key list falls inside the given rate. rate <= 0 selects nothing and rate >= 1 selects everything; a NaN rate fails closed

SanitizeAttributes returns a deterministic copy. Sensitive keys are removed; malformed or oversized metadata fails closed so callers can reject the re

SessionCacheKey is the stable, content-blind key derived from a session id.

SessionMarker builds model-temporary correlation context. Local proxy removes valid markers byte-surgically before provider inspection or forwarding.

StdDensityDraw resolves a density level to its STANDARD-tier geometry, model- agnostic: the dev-tool render (`caveman-engine pixel render`) draws exac

StringProp is a string property schema with a description.

StripSessionMarkers removes only valid HMAC-signed markers. Invalid marker- shaped user text remains byte-identical. Conflicting valid session IDs are

UniqueRecentSession is removed-marker fallback authority. It returns a candidate only when exactly one recent native session remains plausible. Known

ValidateProduction verifies real KMS configuration without network request.

ValidateReplay performs zero-network trace, schedule, and budget preflight.

WithRequestPayloadHash binds the exact post-transform wire body's SHA-256 to the auth-mapping call. Signing adapters use it so credentials cover the b

WriteReplayEvidenceJSON validates and writes one evidence record.

Stable compact UTF-8 JSON shared by assembly hashes and cloned output.

A bundle counter (``policy_version`` / ``sequence``), or None. JSON has one number type, so a publisher may emit ``7`` or ``7.0`` for the sam

appendFieldEdit produces the insertion that adds cache_control immediately before an object's closing brace, leaving every other byte — whitespace, ke

applyDensityFloors clamps a profile away from the reader stall envelope: zebra pitch floors at 5 (colour buys that rung), mono pitch floors at 6, laye

* Build a provider request with stable/session slots above every volatile * slot. Pure client-side: no account and no network call. * * Stabi

assertFrozenPrefixByteEqual asserts the upstream body is byte-identical to the client body for every byte before the live-zone content (located by mar

assertNothingElided checks the property that matters: not a byte of the payload was dropped. Some compressors report ok=true while returning their inp