newBodyCapture returns nil when capture is off, so the hot path costs one nil check. A directory that cannot be created disables capture rather than f

priceInputTokens converts a token quantity into USD at the user's own measured effective input rate. Every sink in the report is input-side (context r

Return True if the file is natural language and should be compressed.

summarizeElided renders the facts that hold across every unit of one elided run, or "" when there are none, extraction found no structure, or the summ

tlsClientConfig builds the ClickHouse TLS configuration from the environment, or (nil, nil) when no CLICKHOUSE_TLS_* knob is set — in which case calle

AnthropicImageTokens returns the Anthropic input-token cost of a w×h image under tier, without the safety margin (callers apply ImageCostSafetyMargin)

Decrypt reverses Encrypt: it expects nonce(12) || ciphertext+tag.

Decrypt unwraps versioned KMS envelope. Metadata can choose only validated key identity under configured provider; it can never choose host or token.

GenerateTrace builds deterministic provider-native real-agent-shaped requests.

Lookup returns the Info for a class. The second return is false for an unknown class — callers fail closed (treat an unknown class as unsafe to run).

New constructs the Bedrock adapter. baseURL is the bedrock-runtime endpoint; in production it is the regional endpoint (https://bedrock-runtime.<regio

NewHTML returns the default HTML article extractor.

NewInsertClient returns an *http.Client bounded for ClickHouse inserts.

Open opens (creating if needed) a cavemem store.

--- Page geometry derived from a render profile --------------------------- A page is drawn as: rows advance by PitchY with an 8px-tall glyph, so the

The session ledger is the accounting the harm tripwire reads, and the freeze registry every lever consults. Its contract: bounded, session-scoped, one

jsonStr quotes s as a JSON string literal for embedding in a request line.

Budget available to a new reservation right now.

--- fixtures --------------------------------------------------------------- retroLogPayload builds a repetitive tool-result body the engine can actua

retroRepeatedBlock is one paragraph heavy enough to clear minBlockTokens.

C8 review finding 5: this optimizer adds a client-visible SSE chunk to the response (an observable effect outside what byte-safe promises), so like re

CanonicalDetail returns the deterministic JSON encoding of a detail blob: keys sorted (Go's encoding/json sorts map keys recursively), whitespace stri

DecodeTOON parses the supported TOON subset back into the JSON data model.

Encrypt delegates encryption to key manager.

NewAXTree returns the forced-only CDP Accessibility.getFullAXTree compressor. It emits a compact, deterministic indented view with uid handles while C

NewConfig returns the deterministic YAML, TOML, and INI compressor.

NewEngineCompressor builds the engine-backed compressor over a CCR store. The engine shares that store, so a handle returned by StoreOriginal resolves

NewTerminal returns the default terminal/command-output compressor.

NewUsageScanner returns a sink that the proxy tees the upstream response through. It captures usage from both whole-body (non-stream) and SSE/JSONL (s

NormalizeRawCacheUsage maps official cache counters into UsageObservation. Unknown providers, duplicate keys, negative/fractional counters, ambiguous

ParsePoolConfig validates the connection string and applies the managed database CA to every TLS path. Production rejects sslmode=require because it e

ProjectAnthropic projects a Messages request onto the provider's current count_tokens input surface. Every proven count field is copied as its raw JSO

ReadTraceJSONL reads trace records using conservative default resource limits.

RenderTextToTwoLayerPNGs splits wrapped text into max-level overlay pages. Each image holds up to 2×N lines: the first N in the red layer, the next N

SafetyClass is the compressor's inherent class on the S0–S4 ladder.

Shrink compresses a tool catalog with an S4 lossy transform. It is fail-open: on any parse problem or when the result would not be smaller, it returns

Sign computes the SigV4 signature for req against the given payload and sets the Authorization, X-Amz-Date, X-Amz-Content-Sha256 (and, when present, X

StripToolSchemaAnnotations removes the annotationDropKeys keywords from a serialized tool catalog (the provider `tools` array) and returns ok=false wi

Supersede atomically replaces one current memory with a new current version. The old row remains durable for history and byte-exact audit, but normal

ToolRawText wraps a raw string (e.g. recovered original bytes) as text content.

ToolText wraps a value as a single JSON text content item (the agent receives JSON it can parse).

ValidateHost resolves host (bare hostname or IP literal) and checks all resolved addresses. Use when you have a host/port pair rather than a full URL

WriteTraceJSONL writes strict replayable trace v3 records.