linesPerPage is how many text rows fit in a canvas of the given height at this pitch: (H - 2*pad - glyphH)/pitch + 1.

liveEngine is the real engine over a real (in-memory) CCR store — the same pairing the wrap runtime uses.

Zone tagging for the cross-turn prefix fix. OpenAI caches long prompt prefixes automatically, so a message this proxy compressed while it was the live

openaiTurnConversation is an OpenAI chat session of n user turns with assistant replies interleaved: turn N's live zone is turn N+1's automatically-ca

POST context candidates to ``/sdk/v1/context/pack``. On transport or malformed-report failure, returns every caller-owned item with z

planRespBody carries provider cache counters so the session ledger has real numbers to account.

* Hold `amount` against the ledger. Returns `undefined` when it does not fit, * which is the caller's signal to clamp, compact, or stop — never to

segmentBlocks splits one text payload into candidate blocks on blank-line boundaries, preserving each block's internal bytes verbatim. The editing ski

* Replace a reservation with the measured cost of the call it covered. * * `actual` is recorded as it came in. It is never clamped to the reserv

snippet trims an error body so we never echo a large/secret-bearing response.

Line-ending helpers shared by the line-oriented compressors. The old pattern here was `sep := "\n"; if bytes.Contains(input, "\r\n") { sep = "\r\n" }

CompatUpstreams returns every named OpenAI-compatible upstream that the proxy mounts. The result starts with the built-in table. Then the caveman.yaml

ContentType is the type this compressor handles (e.g. "json").

Credential returns the provider credential resolved from the environment. Empty means the caller must fail closed or use an explicit inbound credentia

DecodeAndValidate strictly parses a catalog. Unknown YAML fields, duplicate provider/model/region rows, invalid URLs/timestamps, and unsafe prices rej

Delete removes key (no error if already absent).

For returns the compressor for a content type, or (nil, false).

ForInputTokens applies a catalog-declared long-context surcharge to a copy of price. The provider-reported total input count determines the threshold;

FromEnvironment loads production configuration. Endpoint is not configurable, preventing env-driven host redirection of KMS credentials.

FromPayloadEnvironment selects the payload KEK and permits the secrets KEK only for decrypting artifacts created before key separation shipped.

IsEnvelope reports whether blob uses versioned KMS envelope format.

Name identifies the counting basis (e.g. the encoding name) for display and cross-surface parity.

NewMemory returns an empty in-memory Store.

ObserveSummarySince returns the compact observe-estimate object, optionally filtered to rows at or after an RFC3339 instant (the wrap session start).

Pack selects the best items that fit within the token budget. It scores in relevance order but returns selected items in their original order so messa

Seal compresses-agnostic: it encrypts plaintext with a fresh data key and returns (ciphertext, metadataJSON). ciphertext is nonce(12)||GCM(body).

ValidateProduction is the startup gate for the ClickHouse transport: call it from every service main alongside env.Refuse*ProductionDefaults, as early

VerifyChain re-walks a proposal's runs ordered by seq and asserts: - seq starts at 1 and increases by exactly 1 (no gaps, no dupes); - each row's prev

A urlopen stub plus the list it records lowercased headers into.

assertScoped verifies every produced row carries the authenticated org/project (never the file's) and the honest non-null defaults.

buildAdapters makes the provider adapters. Anthropic, OpenAI, and Gemini always get their public default upstream, so a bare `caveman start` works. Be

buildLearnSpend prices the accumulated buckets. Returns nil when nothing priceable was measured — an empty spend card is worse than none.

compressionSavingsUSD is the inferred dollar value of the input tokens that S4 content compression removed before the request reached the provider. It

configTaxPerTurn is the statically measured token tax loaded on every turn: CLAUDE.md (user + project) + the user skill catalog. Hooks/plugins are rep

crSuffix returns the CR a synthesized line needs so it matches the endings the rest of the document uses.