通过 git rev-parse 解析仓库根，避免等待 VS Code Git 扩展初始化。

requireGitRepo validates that the given directory is part of a git repository.

resolveEnv reads environment variables to override defaults. Environment takes highest priority.

resolveFromFileContent scans the new file content line-by-line for consecutive matches of the normalized existing_code.

resolveFromHunk tries to find startLine/endLine by matching ExistingCode against hunk lines. It tries the new-side first (context + added lines → new-

resolveSystemRule returns the rule text for a given file path, matching against PathRuleMap glob patterns, falling back to DefaultRule.

resolveWorkingDirForSession accepts an explicit --repo flag value and falls back to the current working directory. Unlike resolveRepoDir it does not r

runeWrapCut returns a rune index suitable for breaking the line at ~maxW display width.

runtimeConfigSHA256 is the deterministic identity of the allowlisted, non-secret runtime settings: protocol, model, sanitized endpoint host, language,

savedSecretFingerprint returns a short fingerprint for display, e.g. "sk-a1b2...wxyz" (first 6 + "..." + last 4). Returns "" when the trimmed secret i

* 选出与 workspace 匹配的仓库。嵌套仓库场景下 repositories 顺序不稳定, * 不能直接取 [0],否则会漂移到子仓库。

severityColor maps a finding severity to an ANSI color used for its badge. Unknown or empty severities fall back to dim.

sourceArtifactSHA256 is the deterministic content identity of this run's selected input: for every non-deleted diff (the same set registerCoverage sea

* Strip YAML frontmatter from markdown content

stripMarkdownFences is the package-private workhorse used by the internal compression code paths.

summarizeArgs extracts a concise key=value summary from tool arguments for console display. It picks the most human-readable fields depending on the a

--- Validation functions ---

wrapByRunes splits text into lines that fit within maxWidth **rune** columns. Respects existing newlines and wraps at word boundaries.

wrapSingleRuneLine breaks one paragraph (no newlines) into rune-width-constrained lines.

ApplyLanguage injects a language directive into all system-role messages of the scan template (MAIN_TASK, PLAN_TASK if set, DEDUP_TASK if set, and MEM

CanonicalConfig returns a deterministic, order-stable field list describing this rule set's effective rule-text configuration, for hashing into the ru

CollectPendingComments awaits any async comment-processing workers and returns the aggregated comments from the collector. Safe to call once per sessi

ExcludedDirs is the list of directory prefixes that scanners and diff providers should always skip. Exposed so internal/scan and other consumers can r

FilesReviewed returns the number of items included in this scan.

IsAllowedExt returns true when the given file extension is in the supported types list. The check is case-insensitive.

IsCommitMode returns true when analyzing a single commit.

IsExcludedPath returns true when the given file path matches any default exclude pattern. Patterns support ** (recursive directory matching), * (singl

IsRangeMode returns true when comparing two refs.

MatchGitignorePattern reports whether relPath matches a single gitignore-style pattern, using the simplified semantics that diff.Provider already impl

Sealed reports whether the selected set has been sealed.

Session returns the session history associated with this Agent.

Session returns the session history associated with this Agent.

SessionID returns the current scan's persisted session ID. It returns an empty string when no session file exists.

SessionsDir returns the on-disk directory that holds JSONL session files for a given repository. It does not create the directory.

ToolCalls returns a snapshot of the per-tool call counts.

TotalCacheReadTokens returns the accumulated cache read tokens.

TotalCacheWriteTokens returns the accumulated cache write tokens.

TotalTokensUsed returns input + output.

Validate checks that a ScanTemplate has the minimum fields populated.

Warnings returns a copy of the accumulated warnings.

WriteLLMError writes an llm_error entry recording a failed LLM request.

WriteLLMRequest writes a request entry with the resolved messages.

WriteLLMResponse writes a response entry with model, content, tool calls, usage.

WriteReviewItemDone writes a file-level resume checkpoint for a completed diff.

WriteReviewItemFailed writes a file-level checkpoint for a failed diff.

WriteReviewItemReused writes a checkpoint reused from a previous session.

WriteSessionEnd writes the final session_end summary record and closes the file. When manifest is non-nil it is embedded under "run_manifest"; session

WriteToolCall writes a tool call result entry.