AnalyzeTrial runs local-only replay checks against captured payloads, stores the resulting moves, then returns the public TrialPlan. Local never verif

AppJWT builds a short-lived (10-minute) RS256 App JWT signed with the App private key. iat is backdated 60s to tolerate clock skew (GitHub's guidance)

BM25 scores each document against the query using the same deterministic Okapi BM25 the context packer uses (k1=1.5, b=0.75) — no embeddings, no netwo

BuildLearnPlanFilteredWithRetro applies a repository substring before turn events reach behavioral detectors. Config scanning intentionally remains ro

CachePointEligibleModel reports whether the cache-point transform may run for a model: an Anthropic Claude id — bare or behind one inference-profile s

ClassifyResolvedAuthMode includes the credential resolver's final BYOK/config key. Header-only classification labeled a configured subscription/OAuth

Compress encodes data with the named codec. "none" returns data unchanged.

ConfidenceScore is a CHEAP, PURE heuristic that scores how confident a cascade rung's answer text looks, in [0,1]. Lower = less confident = should esc

DecompressLimit reverses Compress while refusing to produce more than maxBytes of plaintext. The limit is applied while decoding gzip and through zstd

Exists reports whether key is present.

ExtractCompressible is exported so Azure OpenAI and OpenAI-compatible adapters can reuse the identical wire grammar without changing provider identity

Forget deletes a memory by id and atomically repairs neighboring lineage pointers. Expired predecessors stay expired: deleting a current version means

FromEnv builds a Store from the S3_* environment variables. It returns (nil, nil) when S3_ENDPOINT is unset outside production. Production requires ob

FrozenLevers returns this session's frozen levers in a stable order, for the x-caveman-tripwire disclosure header.

InsertConfigSnapshots persists the measured config sources (evidence/export).

List returns all keys under prefix (used by retention + ZDR assertions).

New constructs the Vertex adapter. baseURL is the aiplatform endpoint; in production it is a Vertex host (e.g. https://us-central1-aiplatform.googleap

New parses the private key, validates the base URL, and builds the App. It returns an error (not a half-built App) on any misconfiguration, so callers

NewDiff returns the unified-diff compressor.

NewQueryClient returns an *http.Client bounded for ClickHouse queries/DDL.

NormalizeTerms bounds query metadata before it can enter CCR or ranking.

Probe proves the operations production retention needs instead of accepting a syntactically valid but unusable bucket configuration. The random probe

Probe verifies live key access without persisting tenant data.

ReplaceRaw replaces one JSON value while preserving every byte outside span. replacement must itself be valid JSON. Unlike Replace, it does not quote

ResolveEnvironmentSecret loads a boot-time secret. In production plaintext environment variables are rejected: operators must provide a base64-encoded

RunManifestWithQuality is RunManifest plus the LLM-in-the-loop quality layer. The runner is injected so CI can use a deterministic local runner while

Shutdown closes the attached browser process. Ordinary Close only releases this driver context; direct CLI mode deliberately leaves its detached Chrom

SocketPath returns a per-install named-pipe path shared with Node adapters.

SocketPath returns the user-local normalized hook socket. Host adapters never choose this path, preventing one integration from impersonating another

Summary aggregates the in-memory recoveries into totals + per-type buckets.

Accept JSON integers only; reject bools, floats, strings, and negatives.

Describe the first-party Bedrock gateway surface. Runtime is the default. Mantle is an explicit opt-in descriptor. This method perfor

buildChain appends rows the way the two writers do: prev = last row_hash, seq+1.

buildLearnSavings turns confirmed rows into the attributed ledger. Rows whose verdict is not a measured improvement still appear — a regression that d

cacheStatusFor maps observed usage to a cache_status. It only asserts hit/miss when the provider actually reported cache telemetry; otherwise it stays

captureProxyServer is the standard proxy wiring these tests drive through the real handler: one adapter, a socket-free upstream, no compressor.

Read this project's Cave Plan machine-readably (``GET /sdk/v1/cave-plan``). Authed by the project key's ``plan:read`` scope. Returns the

compileOrgRules validates and canonically orders the tenant's rules, and returns a fingerprint of them for RuleSetHash.

configTrendSink names what grew. Paths ARE included here, unlike in the digest: this sink is for the user's own eyes and a growth finding without the