formatToolDefs renders tool definitions as human-readable text for embedding in prompts.

分支对比：merge-base 三点 diff。

单次提交：该 commit 相对父提交的改动文件。

* Get raw content for a slug in the given language, with English fallback.

hostGuard returns a middleware that rejects requests whose Host header is not on the allowlist. This blocks DNS-rebinding attacks against the local vi

hostOnly returns the bare host portion of a Host header value, with any port stripped and surrounding brackets removed from IPv6 literals. Empty or ma

initConsoleProviders sets up stdout exporters for traces and metrics.

initManifest seeds the run manifest with this run's input identity and execution provenance. It is nil-safe (the builder is absent on the delegate pre

initRepoWithNonASCIIChange creates a repository whose changed file path contains both non-ASCII characters and Next.js-style route groups. It forces G

injectDiffMap builds a read-only DiffMap from parsed diffs and sets it on the FileReadDiffProvider. Must be called after loadDiffs and before any conc

injectScanContentMap fills the file_read_diff tool's DiffMap with full file content keyed by path, so if the model calls it the tool returns the whole

isLoopbackHost reports whether host is a loopback name or IP literal that is always safe to accept regardless of operator configuration.

listFiles returns all source files under repoDir. In a git repo it uses `git ls-files` for full .gitignore semantics (nested + global excludes + negat

loadDiffs populates the diff-related fields.

loadLLMRuntime loads tool defs from toolConfigPath, reads the app config from the user's default config path (applying the configured language to tpl

manifestInput builds the frozen input identity per the input-mode field matrix: range carries both requested refs, commit carries only the requested h

manifestMode maps the review to the manifest input mode. It derives purely from From/To/Commit so the value is always one of the three valid input mod

manifestPaths returns the old/new paths for identity derivation with the "/dev/null" sentinel (added/deleted files) collapsed to empty, so it never po

mapOpenAIResponse converts the SDK response into ChatResponse.

matchGitignoreBody reports whether relPath matches a single pattern body — the pattern with any leading "!" already stripped.

newJSONLWriter creates and opens a new JSONL writer for the given session.

newStdoutMetricExporter creates a console metric exporter with pretty-print output.

newStdoutTraceExporter creates a console trace exporter with pretty-print output.

otlpSignalURL builds the URL for one signal from the configured endpoint. OTEL_EXPORTER_OTLP_ENDPOINT is defined by the OpenTelemetry specification a

parseBatchStrategy normalizes a user-supplied strategy string. Unknown or empty values fall back to BatchNone (safe v1 behavior).

parseFilterResponse extracts comment indices from the LLM filter response. Returns a set of 0-based indices. Invalid IDs or out-of-range indices are i

parseOTLPEndpoint strips a http:// or https:// scheme from the endpoint and reports whether the connection should be plaintext (insecure). Scheme matc

parseTimeoutEnv reads and validates the OCR_LLM_TIMEOUT environment variable. Returns the parsed duration and true if set, or 0 and false if unset/emp

printDiffLine renders a single diff line with colored prefix and background on content.

probePathIndex is like probePath but also returns the index of the matched path.

工作区模式仅刷新变更文件，不等待 VS Code Git 扩展，也不拉分支/提交历史。

registerReviewFlags registers all review command flags on cmd, binding to opts.

registerScanFlags registers all scan command flags on cmd, binding to opts.

renderMessages substitutes placeholders in the scan template's MainTask for a single scan item. planGuidance is the output of maybeRunPlan and gets su