countTokens is the same inferred estimate the replay bench prices context policies with: `internal/replaybench/cost.go` takes an engine `tokens.Counte

decodeRaw unmarshals a[b] usage.RawUsage for comparison, tolerating that re-marshaling a parsed map can reorder keys (values are what matter).

POST buffered spans to standard OTLP/HTTP ``{base_url}/v1/traces``. Returns the gateway's JSON response (``ok`` / ``spans_accepted`` /

keepNonRedundant guarantees that every distinct kind of content in a payload survives an elision at least once. A unit about to be dropped is kept whe

pageCols is the column count that fills the profile's canvas width — 312 on the std canvas at cell-advance 5, 513 on the hi-res canvas, etc.

POST the tool catalog + query to the gateway's /sdk/v1/tool-search endpoint. Returns a ToolSearchResult that includes the reduced tool list a

AtlasGrayRank binary-searches the sorted grayscale codepoint table; -1 when absent.

Command builds a git invocation rooted at root that the repository cannot steer. Inherited GIT_* variables are dropped so an outer environment cannot

Complete reports whether both provider token totals were observed and all recognized counters were internally valid. Billing must not extrapolate a pl

Default returns a registry with the engine's built-in compressors registered: JSON, log, code, diff, search-result, text, HTML, tabular, config, tool-

DensityFromEnv reads CAVE_PIXEL_DENSITY lazily (like CAVE_PIXEL_MODELS in applicability.go — no init-time caching). Unset/empty defaults to balanced;

DialContext returns a DialContext function suitable for use in http.Transport.DialContext. It re-validates the resolved IP at the moment the kernel a

Grade runs one grader against a subject. The default branch fails closed: an unknown or misspelled grader type is never treated as a pass.

Handle returns the content-addressed handle for a payload without storing it.

History returns the complete oldest-to-newest supersession chain containing id. Broken/cyclic lineage is rejected rather than returning partial histor

InsertTimeout is the bound for ClickHouse inserts (CLICKHOUSE_INSERT_TIMEOUT_MS, default 5s).

IsProduction is the single definition of "this process runs in production". Every refusal gate must agree on it: a CAVE_ENV of " prod" or "PROD" that

LookupReplacement returns the exact replacement bytes previously emitted for these original bytes plus the CCR handle they disclose. An evicted or abs

NewHTTPClient returns an *http.Client whose Transport enforces the SSRF policy at dial time. The caller may set additional fields (Timeout, etc.) on

NewText returns the long text / HTML compressor.

ObjectSchema builds a JSON-Schema object for a tool's inputSchema.

PickSession makes baseline assignment reproducible from locked metadata. Candidates are ordered by action ID so config/YAML ordering cannot alter a ro

QueryTimeout is the bound for ClickHouse queries/DDL (CLICKHOUSE_QUERY_TIMEOUT_MS, default 30s).

RegionAllowed is the shared closed region validator used by adapter routing and control-plane Bedrock connection metadata.

RunManifest replays an arbitrary manifest, reading fixture files via read. It is exported so tests can seed a deliberately-failing manifest and assert

Sign computes the SigV4 signature for req against the given payload and sets the Authorization, X-Amz-Date, X-Amz-Content-Sha256 (and, when present, X

String scrubs secret material from s and returns the cleaned string along with the names of all rules that fired. The returned slice is nil when noth

applyScope stamps the authenticated org/project onto a span and fills the honest defaults that the spans schema expects for non-null operation. It is

chatgptTestServer wires a Server whose /chatgpt upstream is a local stub.

compressRequest applies S4 compression to live-zone content and re-applies the replacements it already emitted to frozen content. Each live segment is

dialContextWith resolves each hostname exactly once, validates every returned address, then dials a validated IP literal. net.Transport passes hostnam

Backtick-delimited inline spans, with fenced code blocks stripped first. Previously used a column-0-anchored regex to strip fences, which misses