runGitTest runs a git command in dir and fails the test on error.

Await blocks until all submitted work has completed and returns aggregated results from every Submit call so far. A panic in submitted work is recove

Freeze prevents further mutations. Call once setup is complete.

ResolveEndpointWithModelOverride resolves an endpoint like ResolveEndpoint, but uses modelOverride as the request model when it is non-empty. The over

SetResponse records the LLM response in the most recent TaskRecord of the given type. It uses actual token usage from the API response when available,

beginAPIKeyReplace switches from the fixed-length mask placeholder to edit mode so the next keystroke or paste fully replaces the saved key. While edi

cloneProviderEntry deep-copies a ProviderEntry so callers (rollback paths, map cloning) can safely mutate the returned value without aliasing the orig

matchConsecutive scans sideLines for a consecutive run matching all targetLines.

resolveUsage parses raw JSON bytes into a map and extracts token usage by probing configured paths sequentially. Returns nil if no total_tokens found.

whyExcluded applies the filter algorithm as shouldReview but returns the specific reason a file is excluded.

writeTempFile writes content to a temporary file and returns its path.

Event emits a structured event as a span with immediate end.

LoadDefault parses the embedded system_rules.json and resolves rule file references.

NormalizeProtocol canonicalizes protocol names. It is case-insensitive and trims whitespace. Empty string is returned as-is (the caller decides the de

Output executes a git command and returns stdout only.

Restore re-enables stdout. Safe to call multiple times.

expandBraces turns "{a,b,c}" style patterns into individual strings. e.g. "*.go.{java,kotlin}" → ["*.go.java", "*.go.kotlin"]. If no braces exist, ret

resolveWorkingDir returns (absPath, isGitRepo, err). When requireGit is true, returns an error if the directory is not a git repo. When false, returns

ApplyLanguage injects a language directive into all system-role messages across MAIN_TASK, PLAN_TASK (if set), and MEMORY_COMPRESSION_TASK.

IsUserIncluded reports whether the given path matches any user include pattern. Returns false when Include is empty (no user include restriction defin

NewDiffMap creates a frozen, read-only DiffMap from a plain map.

ParseDiffText splits the unified diff text into per-file Diff structs. ref, if non-empty, is a git ref used to read new-file content via git show inst

PromptTokenLimit returns tokenWarningThreshold (80%) of maxTokens. It is shared by the agent and scan pre-flight gates, their large-input filters, and

RecordReviewItemDone persists the file-level checkpoint used by resume.

RegisterAll registers tools from the MCP client into the tool registry. When allowedTools is non-empty, only tools whose names appear in the list are

RunPerFile drives the main LLM conversation loop for a single file. It sends messages with the configured tool definitions, executes any tool calls re

Tool returns which tool this provider implements.

buildResponsesParams converts the shared ChatRequest into Responses API parameters. Mapping notes: - Multiple system messages are concatenated into I

dispatchSubtasks runs the Plan + Main phases for each changed file concurrently.

newQuietHandle silences stdout when outputFormat=="json" or audience=="agent"; otherwise the returned handle is a no-op restorer.

AnyToAttr converts an arbitrary value to an OTel attribute.KeyValue.

DiscoverRepos walks the sessions root and returns one entry per subdirectory.

ErrorEvent emits an error event with error status.

LoadDefault parses the embedded task_template.json and resolves prompt file references.

NewProvider creates a Provider that enumerates the repository at repoDir. If paths is non-empty each element must be a repo-relative path (file or dir

NewWorkspaceProvider creates a Provider for workspace mode (current uncommitted changes).

RecordLLMResult sets the outcome of an LLM request on the span.

RecordUsage adds the prompt/completion/cache tokens reported by an LLM response to the runner's aggregate counters. Used by callers (plan phase in age

ValidateProtocol accepts the three canonical protocol names and rejects everything else.

dispatch routes top-level subcommands or global flags.

mapResponsesResponse converts the SDK Response into the shared ChatResponse. Text output is read via the SDK's OutputText() helper (it walks all outpu

runCompression performs three-zone memory compression on the given messages, summarizing the compress zone while preserving the active zone intact. Re

validateReviewRefs rejects ref-option injection (#112): any --from/--to/ --commit value must be a real commit ref and must not start with '-'.

CanonicalPath returns an absolute path with symlinks resolved.

CommentsForPath returns a copy of comments whose Path matches the given path.

Dynamic creates a Tool with the given name for dynamically discovered tools (e.g. MCP).

Enumerate returns one ScanItem per reviewable file. Binaries are emitted with empty Content + IsBinary=true so previews can show them as excluded.

IsUserExcluded reports whether the given path matches any user exclude pattern.

--- Factory --- NewLLMClient creates the appropriate client based on the resolved endpoint protocol. protocol dispatch (canonical names from protocol.

ParseComments extracts LlmComment entries from tool call arguments without writing to the Collector. Returns parsed comments and an error message (emp

ParseHunks parses raw unified diff text for a single file into a slice of Hunks. Lines before the first @@ header (file-level headers like "diff --git

StripMarkdownFences removes ```json and ``` wrappers some models add around structured outputs. Exposed so callers (e.g. agent's review-filter post-st

applyCLIExcludes appends user-supplied --exclude patterns (already split into a []string) onto cc.FileFilter.Exclude. Creates the FileFilter if none w