loadGitignorePatterns reads and parses .gitignore patterns from the repo root.

makeBudgetDiffs returns n small, non-deleted diffs that survive filterDiffs and filterLargeDiffs.

manifestMode maps the review to the manifest input mode. It derives purely from From/To/Commit so the value is always one of the three valid input mod

mergeBase computes the merge-base for range mode. Returns "" for other modes.

newRequestMeta builds the retry-report identity for one logical LLM request. It is the single place provider and model are read for that purpose — th

officialAPIKeyRequiredError mirrors the wording applyOfficialProviderConfig uses for the same failure, so the interactive and non-interactive paths na

outputPreview renders a preview in the requested output format. sarif is rejected with an error because a preview contains file/rule metadata, not rev

positionalSignature extracts the positional-argument part of cmd.Use, e.g. "<key> <value>" from "set <key> <value>" and "<path...>" from "rule [flags]

preview is read-only with respect to the Agent: it does not mutate a.items. (Earlier versions did, which made a subsequent Run on the same Agent silen

printDiffLine renders a single diff line with colored prefix and background on content. With color disabled it emits "<prefix> <content>", which keeps

printWizardCancelled prints the standard Esc-cancel message for config wizards. changesDescription is a short noun phrase, e.g. "Configuration changes

readJSONLLines visits each physical JSONL record without bufio.Scanner's fixed token ceiling. session_end embeds the complete run manifest and can leg

request is a resume of parentState with the same provider and model, which is the accepted baseline every case below deviates from.

requestCtx returns ctx carrying the identity of one logical LLM request, or ctx unchanged when identity is disabled (scan) or the meta is unusable. C

resolveAllowedHostsFromEnv reads the OCR_VIEWER_ALLOWED_HOSTS environment variable and combines it with the bind host to produce the active allowlist.

resolveConfigPath returns OCR_CONFIG_PATH when set, otherwise the default user config path. Intentionally used only by read-only commands (e.g. ocr ll

resolveLang returns the resolved language name for the instruction.

resolveMaxTokens applies the per-run CLI override, then the saved setting, and finally the embedded task-template default.

retryAttemptChain renders one logical request as a short human-readable chain.

runIdentity reads the identity off the agent's current selection. It is only meaningful once the selection is final: sourceArtifactSHA256 hashes what

runReview provides test compatibility for the pre-cobra runReview(args) entry point: parse flags, then execute the review.

runSessionListCompat provides test compatibility for old-style runSessionList([]string{...}) calls.

runSessionShowCompat provides test compatibility for old-style runSessionShow([]string{...}) calls.

sanitizeRetryCodes filters out SDK-default codes (408, 409, 429) and returns the remaining valid codes, any warnings for filtered codes, and an error

sarifFingerprints builds a stable partialFingerprints entry for a finding. The fingerprint is based on Path + Category + ExistingCode (not message.tex

savedSecretReplaceHint builds the replace hint text without leading indent.

scanLines reads from r line by line, collecting at most maxLines lines starting from startLine (1-based), while counting the total number of lines. Th

sealRepo builds a two-commit repo on a branch, so `main..feature` is a real range whose head a later commit can move.

securityHeaders wraps a handler and sets defense-in-depth response headers on every reply. These harden the local viewer's browser-facing surface (the

setColorFlags sets the flag-backed variable for one test and restores it.

shouldReview applies the filter algorithm via whyExcluded.

shouldSkipFile returns true if a git ls-files output path should be skipped. Keeps only widely useful files (those with recognizable extensions).

splitAndNormalize splits code text into lines and normalizes each one.

splitBindHost returns the host portion of a listen address as passed to http.Server.Addr. Empty input returns "".

stripEmptyPlanBlock removes the "### Review Directive\n{{plan_guidance}}\n\n" wrapper from a MAIN_TASK user message when the plan phase produced no gu

stripThinkTags removes reasoning wrapper tags from content.

Find-or-create/update a summary note. Sticky matches the cross-run :data:`SUMMARY_MARKER`; non-sticky matches this run's ``tag`` (per-run), s

valid reports whether m can identify a logical request. Provider may be empty; Model, FilePath and TaskType may not. No field may contain NUL, becaus

等待至少一个仓库就绪（git 扩展异步扫描，首次可能为空）。

whyExcluded mirrors agent.whyExcluded but for ScanItem inputs.

writeGarbageExternalDiff writes a shell script that emits non-diff output and returns its path. When git invokes it via GIT_EXTERNAL_DIFF / diff.exter

writeRangeResumeSession persists a range-mode session with the given completed file checkpoints and returns its ID. HOME must already point at a temp

AddToolResult appends a tool call result to this task record and writes a tool_call record to the JSONL stream.

ApplyEffort overwrites the effort-controlled template scalars.

ApplyLanguage injects a language directive into all system-role messages of this conversation.

BedrockContext reports the AWS region and profile a Bedrock client resolved, so callers can show what a request actually used. ok is false for every o

BudgetExceeded reports whether the aggregate token budget gate stopped dispatch before every file was reviewed. Diagnostic only: scan still returns it

BuildToolDefs converts toolsconfig.ToolConfigEntry slice into []llm.ToolDef, filtering by phase (planOnly=true for plan_task, false for main_task).

Complete returns a checkpoint signaling task completion.

EndSpan ends the span and records error status if present.

Eventf is like Event but includes a message attribute.

Fail returns a checkpoint signaling terminal task failure.