extractSideLines extracts one side of the diff from a hunk. When newSide is true, returns context+added lines with new-file line numbers. When newSide

fileGroupKey returns a deterministic key for a file group: sorted paths joined by comma.

groupBatches partitions items according to strategy, then slices each natural group into BatchSize-sized chunks (when size > 0). Within a batch the in

initBareRepo creates an empty (unborn) git repository with identity configured but no commits, returning the repo dir.

initRepo creates a git repo with one commit containing the given files and returns the repo dir and the commit SHA.

looksLikeFilePath returns true when s is likely a file path (not inline content). Heuristic: multi-line text is always inline; single-line text withou

newCustomModelTUI builds a modelTUIModel backed by a custom provider with a writable config path, so add/delete/persist operations exercise the save p

newOpenAITestServer returns an httptest server that captures each request's headers and JSON body and responds with a minimal valid chat completion.

parseBpeData parses the base64-encoded BPE data format. Each line: <base64-token> <rank>

readRuleFileSafe reads and validates a rule file: extension whitelist, 512 KB cap, and symlink resolution. When confineRoot is non-empty, the resolved

runConfig provides test compatibility: dispatches config subcommands through a fresh cobra command tree that mirrors the production config command, so

运行任意参数，流式回调日志，结束返回 stdout 全文。退出码非 0 时 reject，并带上 CLI 报错文本。

seedParentManifest gives a hand-built ResumeState the parent manifest a real resume always has, matching the identity a already resolved. Without one

tryApplyPendingCompression checks whether a background compression has completed and swaps the rebuilt messages into place. Returns true if applied.

unwritableConfigPath returns a config path that is itself a directory, so any saveConfig / loadOrCreateConfig against it fails. This is the lever used

AsDiff returns a Diff suitable for handing to code that expects the diff-based shape (line-number resolver, file_read_diff tool). The Diff field stays

BudgetExceeded reports whether the aggregate token budget gate stopped the run before all files were reviewed. It is a diagnostic signal only — it fee

CollectToolDefs gathers tool definitions from MCP clients, filtering out tools that conflict with built-in tools or were not successfully registered.

ContextWithTraceParentFromEnv extracts W3C traceparent from the TRACEPARENT environment variable and returns a context carrying the upstream span cont

Frozen reports whether Finalize has already run.

Init initializes global TracerProvider and MeterProvider based on environment variables and optional config file. Returns true when enabled. Safe to c

ListSessions enumerates all persisted sessions for the given repository directory, sorted by StartTime descending (most recent first). Missing directo

LoadAppConfig loads config from path. Returns nil, nil if file does not exist.

LoadComments replays one session's JSONL and returns every review comment recorded in it, in file-completion order. It mirrors resume replay semantics

NewSessionKey returns a fresh UUIDv4 session key. Clients use it as a per-client fallback for requests whose context carries no session key (e.g. `ocr

ParseComments extracts LlmComment entries from tool call arguments without writing to the Collector. Returns parsed comments and an error message (emp

Reason is the safe, human-facing sentence for a stop, and the single source of truth for it: the diff-review manifest reason and the scan subtask warn

RecordWarning adds a non-fatal warning.

RelocateAcrossFiles handles the comment whose ExistingCode belongs to a different file than the one it was filed against. The reviewing Agent reads r

ReplaceSince replaces comments[start:] with the given replacements. Useful for batch-level dedup: take a Snapshot, run a batch, dedup the new comments

Run executes a git command and returns the combined stdout+stderr output.

SessionKeyFromContext returns the session key carried by ctx, or "" when none was set.

SetExecution sets the non-secret execution provenance.

SetRepository sets the redacted repository identity.

Submit runs f in a background goroutine bounded by the semaphore. When f completes its return value is collected internally.

TotalInputTokens returns the accumulated input/prompt tokens from all LLM calls.

TraceIDFromContext returns the hex-encoded trace ID of the span carried by ctx, or "" if ctx carries no valid span (e.g. telemetry is disabled).

ValidateResume reports whether req may reuse this parent's checkpoints. A mismatch on any input field rejects the whole resume rather than degrading

bindRawWriter opens the session's raw capture file and attaches it to the run's raw holder; defer the returned closer. A nil holder (capture off) or a

buildAllowedHosts returns the default-deny allowlist used by the host guard. The set always includes the standard loopback names. If bindHost is a con

buildConcatenatedDiffs formats all diffs in the group as per-file XML elements.

cancelPendingCompression aborts the conversation's in-flight background compression, if any.

describe renders m for internal construction errors raised by RetryCollector.Freeze. Those errors reach the user through runErr, and with --concurren

ensureModelInList appends model to the end when missing; never reorders existing entries.

Positional-argument validators that replace Cobra's raw count message ("accepts 2 arg(s), received 1") with an actionable one built from metadata the

executeGroupSubtask performs the Plan Phase + Main Loop for a file group. It returns (completed, stop, err): a hard Go error (err) for provider/config

executeSubtask runs the scan pipeline for one file: 1. Optional PLAN_TASK: produce a JSON checklist of focus areas. 2. MAIN_TASK: review the file with

extractFilenameFromURL returns the filename part (last path segment) of a URL pattern.

filterDiffs drops diffs that should not be reviewed based on user-configured include/exclude patterns and default extension/path filters.

finalizeRequest is the shared body of the client-boundary defer: correct the last attempt if the error only became visible after the SDK returned, the

gitOut runs a git command in dir and returns its trimmed stdout, failing the test on error. Used to capture the SHAs a ResolveInput result must match.

hashFields folds a sequence of string fields into one SHA-256 digest, writing an unambiguous 8-byte big-endian length prefix before each field so no t