Build a provider request with stable/session content above volatile. Pure client-side: no account and no network call. The hash ledger is

callRetrieveTool drives the caveman_retrieve tool exactly as the MCP server does: through the handler EngineTools built, with its session attached.

Drop a reservation whose call never reached the provider.

charBudget is the per-image character capacity of a full canvas page at this profile (rows × cols × layers). Page capacity — not the fixed std budget

countTokens is the same inferred estimate the replay bench prices context policies with: `internal/replaybench/cost.go` takes an engine `tokens.Counte

decodeRaw unmarshals a[b] usage.RawUsage for comparison, tolerating that re-marshaling a parsed map can reorder keys (values are what matter).

POST buffered spans to standard OTLP/HTTP ``{base_url}/v1/traces``. Returns the gateway's JSON response (``ok`` / ``spans_accepted`` /

keepNonRedundant guarantees that every distinct kind of content in a payload survives an elision at least once. A unit about to be dropped is kept whe

pageCols is the column count that fills the profile's canvas width — 312 on the std canvas at cell-advance 5, 513 on the hi-res canvas, etc.

POST the tool catalog + query to the gateway's /sdk/v1/tool-search endpoint. Returns a ToolSearchResult that includes the reduced tool list a

AtlasGrayRank binary-searches the sorted grayscale codepoint table; -1 when absent.

Complete reports whether both provider token totals were observed and all recognized counters were internally valid. Billing must not extrapolate a pl

Default returns a registry with the engine's built-in compressors registered: JSON, log, code, diff, search-result, text, HTML, tabular, config, tool-

DefaultTarget requires 97% request and token hits over at least 100 requests.

DensityFromEnv reads CAVE_PIXEL_DENSITY lazily (like CAVE_PIXEL_MODELS in applicability.go — no init-time caching). Unset/empty defaults to balanced;

DialContext returns a DialContext function suitable for use in http.Transport.DialContext. It re-validates the resolved IP at the moment the kernel a

EvaluateObserved evaluates supplied observations without completeness claim.

Grade runs one grader against a subject. The default branch fails closed: an unknown or misspelled grader type is never treated as a pass.

Handle returns the content-addressed handle for a payload without storing it.

History returns the complete oldest-to-newest supersession chain containing id. Broken/cyclic lineage is rejected rather than returning partial histor

InsertTimeout is the bound for ClickHouse inserts (CLICKHOUSE_INSERT_TIMEOUT_MS, default 5s).

IsProduction is the single definition of "this process runs in production". Every refusal gate must agree on it: a CAVE_ENV of " prod" or "PROD" that

LookupReplacement returns the exact replacement bytes previously emitted for these original bytes plus the CCR handle they disclose. An evicted or abs

NativeRequest reconstructs exact optimizer input captured by v2 or v3 trace. Legacy v1 traces remain readable for observation joins, but cannot drive

NewHTTPClient returns an *http.Client whose Transport enforces the SSRF policy at dial time. The caller may set additional fields (Timeout, etc.) on

NewHTTPReplayTransport validates endpoints, limits, TLS, and redirect policy.

NewText returns the long text / HTML compressor.

ObjectSchema builds a JSON-Schema object for a tool's inputSchema.

PickSession makes baseline assignment reproducible from locked metadata. Candidates are ordered by action ID so config/YAML ordering cannot alter a ro

QueryTimeout is the bound for ClickHouse queries/DDL (CLICKHOUSE_QUERY_TIMEOUT_MS, default 30s).

RegionAllowed is the shared closed region validator used by adapter routing and control-plane Bedrock connection metadata.

ReplaceRaw replaces one JSON value while preserving every byte outside span. replacement must itself be valid JSON. Unlike Replace, it does not quote

RunManifest replays an arbitrary manifest, reading fixture files via read. It is exported so tests can seed a deliberately-failing manifest and assert

String scrubs secret material from s and returns the cleaned string along with the names of all rules that fired. The returned slice is nil when noth

applyScope stamps the authenticated org/project onto a span and fills the honest defaults that the spans schema expects for non-null operation. It is

chatgptTestServer wires a Server whose /chatgpt upstream is a local stub.

compressRequest applies S4 compression to live-zone content and re-applies the replacements it already emitted to frozen content. Each live segment is

dialContextWith resolves each hostname exactly once, validates every returned address, then dials a validated IP literal. net.Transport passes hostnam

Backtick-delimited inline spans, with fenced code blocks stripped first. Previously used a column-0-anchored regex to strip fences, which misses