filterLargeScans drops items whose content exceeds 80% of MaxTokens.

finalizeManifest freezes the run's coverage builder and stores the immutable manifest on the session for persistence and CLI consumption. Nil-safe. A

firstLine returns the first non-empty trimmed line of git output, so a stray trailing newline or an unexpected second line never pollutes a resolved S

formatPlanGuidance parses the PLAN_TASK JSON output into a markdown snippet suitable for embedding in MAIN_TASK. On parse failure it returns the raw c

helperCmd builds a helper command with its steering variables set on the Cmd itself, for the tests that hand an *exec.Cmd to runBrowserCmd directly.

humanTokens formats a token count as e.g. "1.2M" / "850K" / "420".

humanTokens formats a token count as e.g. "1.2M" / "850K" / "420". Mirrors internal/scan/estimate.go; kept here so agent has no scan import.

isUserEditMsg reports whether msg represents user text input (typing or paste).

loadProjectRule reads <repoDir>/.opencodereview/rule.json. Since #287 anchored RepoDir at the git top-level, `ocr review` from a monorepo subdirectory

mapOpenAIResponse converts the SDK response into ChatResponse.

maybeRunPlan invokes PLAN_TASK on the file and returns a human-readable guidance string suitable for {{plan_guidance}} substitution. Returns "(no pre-

mustGetResult extracts the first result from a SARIF document, failing the test if the structure is wrong.

newCompressionRunner returns a Runner whose template forces runCompression to issue a request, plus the message slice to feed it.

newRetryObserver builds the middleware that feeds collector. It sits inside the SDK retry loop, so it runs once per real HTTP attempt and sees neithe

normalizeLine removes leading/trailing whitespace and strips any leading '+' or '-' diff marker.

objcRuleText is the exact text a sniffed .m file must resolve to. Assert on identity rather than on wording: objc.md currently ships as a placeholder

The four blind spots share one shape: the observer sees HTTP 200, the failure surfaces afterwards, and nothing downstream would notice the omission —

partitionMessages divides messages into frozen, compress, and active zones. Frozen zone is always messages[0:2]. Active zone preserves the K most rece

reloadConfigAfterSaveFailure reloads on-disk config and refreshes derived provider TUI state so the UI matches persisted data after a failed save. Ret

reloadConfigAfterSaveFailure reloads on-disk config so in-memory state matches persisted data after a failed save. Returns false when reload could not

requestCtx returns ctx carrying the identity of one logical LLM request, or ctx unchanged when identity is disabled (scan) or the meta is unusable. t

resolveBackground determines the effective background from the flag combination. --background-file wins over --background; the commit-message fallback

resolveRepoDir resolves the repo dir for `ocr rules check`. It delegates to resolveWorkingDir(requireGit=true) so it anchors at the git top-level just

reviseAttempt applies a client-boundary correction to the last attempt of the logical request identified by ctx. Requests without identity (scan, llm

ruleConfigSHA256 is the deterministic identity of the resolved rule configuration this run operates with: the resolver's effective rule-text layers (c

sarifInvocationFromRun builds the run.invocations entry from the manifest's terminal state and any warnings collected during the review. executionSuc

sarifResultFromComment maps a single LlmComment to a SARIF result. Field mapping follows FR-3 in the requirements spec: - Path → locations[].

setRulesCheckRepo points the rulesCheckCmd's package-level --repo flag at repo for the duration of the test, restoring it afterward. runRulesCheck rea

sourceArtifactSHA256 is the deterministic content identity of this run's selected input: for every non-deleted diff (the same set registerCoverage sea

statusBadge renders the per-file status tag. The letter carries the meaning, so with color disabled the bare "[A]"/"[M]"/... form is still unambiguous

stripThinkTags removes reasoning wrapper tags from content.

transition moves a selected item to a terminal state through the single coverage entry point. Unknown item_id, an invalid failed classification, an em

triggerAsyncCompression kicks off a background compression job for the conversation owning st. A no-op when a job is already pending — the check-and-s

valid reports whether c is one of the fixed attempt error classes.

valid reports whether c is one of the fixed item failure classes.

validateTimeoutSec converts a config-file timeout (in seconds) to time.Duration. Returns 0 for zero input (use default). Rejects negative values and o

warn reports the first capture failure on stderr; later failures stay silent so a degraded sink cannot spam every subsequent record.

writeCommit writes content to name, stages it, and commits with msg.

writeOutError surfaces deferred write errors from writers that record them (lazyFileWriter); plain writers such as os.Stdout report nil.

CallTool invokes a tool on the MCP server and returns the text result.

CollectPendingComments awaits any async comment-processing workers and returns the aggregated comments from the collector. Safe to call once per sessi

CompletionsWithCtx sends a Responses API request and maps the result back to the shared ChatResponse shape. The deferred finalizeRequest is this clie

ComputeLineDiff returns a line-level diff between oldLines and newLines. Uses Myers-style LCS to find common subsequences, then emits context/added/de

ContentLogging returns true when content logging is enabled via OCR_CONTENT_LOGGING.

EffortNames returns the accepted values for shell completion and error messages.

FinalManifest returns the frozen manifest stored for this run, or nil when the run produced none (legacy/scan, or a construction failure).

Get returns the diff text for path.

ListSessions returns lightweight summaries for all sessions in a repo subdir.

LoadReviewResumeState replays a review session, dropping records it cannot parse. Review reuse is gated on the parent manifest rather than on these li

MergeBase returns the computed merge-base commit hash for range mode.

Name returns the tool's identifier name.