classifyStreamError classifies a failure that surfaced while consuming an already-established SSE stream. Unlike classifyBoundaryError it always retur

colorf formats then colorizes, so call sites need not nest fmt.Sprintf.

commitFile writes content to name and commits it.

completeSessionIDs offers the persisted session ids for the current repo (or --repo, when already typed) as shell completions, newest first, with a sh

copyMessages creates a shallow copy of a message slice.

countLines returns the number of lines in content. A file without a trailing newline still counts its final line. Empty input → 0.

countReviewable counts diffs that will survive all filters and are not pure deletions.

cursorOnDeletableModel reports whether the model-step cursor is on a row that can be deleted (not on "Enter custom model name...").

customAPIKeyForSave reports the API key to persist and whether the user edited the field (vs left the masked placeholder untouched).

decodeSinglePreviewJSON asserts that s is exactly one JSON value followed only by the encoder's trailing newline. Automation consuming --format json r

errBedrockNotConfigurable explains why the two url+token strategies reject the bedrock protocol. Both describe a single HTTP endpoint and carry no pla

estimateDiffCost projects token usage for reviewing the given diffs. It is the diff-path analogue of scan.estimateCost and is used for the pre-review

estimateCost projects token usage for reviewing the given items under the supplied scan template. planEnabled / dedupEnabled / summaryEnabled reflect

extFromPath returns the file extension with leading dot, lowercased.

extractCodeBlock extracts the content of the first fenced code block from text. Returns empty string if no code block is found.

Render ``content`` as a fenced code block with a safe fence.

fileReadRef picks the ref file_read resolves paths against. A sealed input replaces the ref the user typed with the commit that ref resolved to at ad

filterByPaths keeps only entries whose path equals a user-supplied path (for exact files) or lies under it (for directories).

filterScanItems drops items that should not be reviewed under the standard reviewability rules (binary, extension allowlist, user include/exclude, def

Return the newest note carrying the summary marker (or per-run tag). ``tag`` selects the matching needle: when provided, match this run's per

formatToolDefs renders tool definitions as human-readable text for embedding in prompts.

Render a list of ``{comment, reason}`` as a continuous block.

Render warnings as a bulleted list under a heading ("" when empty).

分支对比：merge-base 三点 diff。

* Get raw content for a slug in the given language, with English fallback.

gitFailure builds an error that carries git's own message. Every diff-producing caller used to drop git's output on the floor, so a failure surfaced

groupChurn returns the group's aggregate churn and its largest single-file churn. Both feed Template.PlanRequired.

hostGuard returns a middleware that rejects requests whose Host header is not on the allowlist. This blocks DNS-rebinding attacks against the local vi

hostOnly returns the bare host portion of a Host header value, with any port stripped and surrounding brackets removed from IPv6 literals. Empty or ma

initConsoleProviders sets up stdout exporters for traces and metrics.

initIdentityRepo builds a workspace with two reviewable files, one the extension rules drop, and one large enough for the token filter to drop.

initManifest seeds the run manifest with this run's input identity and execution provenance. It is nil-safe (the builder is absent on the delegate pre

initRepoWithCommit creates a real git repository with a single commit whose message is `message`, and returns the repo directory and the commit hash.

initRepoWithNonASCIIChange creates a repository whose changed file path contains both non-ASCII characters and Next.js-style route groups. It forces G

injectDiffMap builds a read-only DiffMap from parsed diffs and sets it on the FileReadDiffProvider. Must be called after loadDiffs and before any conc

injectScanContentMap fills the file_read_diff tool's DiffMap with full file content keyed by path, so if the model calls it the tool returns the whole

isBinaryFile reads up to binarySniffWindow bytes from path and reports whether they contain a NUL byte (git's "binary" heuristic).

isLoopbackHost reports whether host is a loopback name or IP literal that is always safe to accept regardless of operator configuration.

keyCmdConfiguredHint explains why this step accepts an empty field. A provider configured only by command renders a blank input -- the command line is

listFiles returns all source files under repoDir. In a git repo it uses `git ls-files` for full .gitignore semantics (nested + global excludes + negat

Return all MR discussions, or None when the read failed.

Return all MR notes, or None when the read failed.