resolveUsage parses raw JSON bytes into a map and extracts token usage by probing configured paths sequentially. Returns nil if no total_tokens found.

retryTestRepo builds a two-file repo with one reviewable commit range (HEAD~1..HEAD), each file carrying its own marker in the second commit only.

silenceStdout redirects os.Stdout to /dev/null for the duration of fn so the delegate commands' Printf output does not clutter test logs.

startFakeLLM starts srv and points the OCR_LLM_* endpoint resolution at it, with HOME/XDG_CONFIG_HOME redirected so the developer's real config and se

whyExcluded applies the filter algorithm as shouldReview but returns the specific reason a file is excluded.

CompletionsWithCtx sends a chat completion request with context support. The deferred finalizeRequest is this client's boundary for the retry report;

Dynamic creates a Tool with the given name for dynamically discovered tools (e.g. MCP).

Enumerate returns one ScanItem per reviewable file. Binaries are emitted with empty Content + IsBinary=true so previews can show them as excluded.

NewCommitProvider creates a Provider for commit mode: show changes introduced by a single commit.

ResolveInput freezes this run's commit endpoints by asking git, following the input-mode matrix: - range: base = merge-base(from,to); head = the

Restore re-enables stdout. Safe to call multiple times.

ValidateProtocol accepts the four canonical protocol names and rejects everything else.

buildResponsesParams converts the shared ChatRequest into Responses API parameters. Mapping notes: - Multiple system messages are concatenated into I

resolveWorkingDir returns (absPath, isGitRepo, err). When requireGit is true, returns an error if the directory is not a git repo. When false, returns

runCompression performs three-zone memory compression on the given messages, summarizing the compress zone while preserving the active zone intact. Re

writeConfig writes an OCR config file to a temp dir and returns its path.

ApplyLanguage injects a language directive into all system-role messages across MAIN_TASK, PLAN_TASK (if set), and MEMORY_COMPRESSION_TASK.

IsUserIncluded reports whether the given path matches any user include pattern. The check is case-insensitive: both path and pattern are lowercased. R

LoadDefault parses the embedded task_template.json and resolves prompt file references.

LoadScanDefault parses the embedded scan_template.json.

NewDiffMap creates a frozen, read-only DiffMap from a plain map.

PromptTokenLimit returns tokenWarningThreshold (80%) of maxTokens. It is shared by the agent and scan pre-flight gates, their large-input filters, and

RecordAttempt appends one observed HTTP attempt for m. startedAt and endedAt bracket the real HTTP call: the observer takes them immediately before a

RegisterAll registers tools from the MCP client into the tool registry. When allowedTools is non-empty, only tools whose names appear in the list are

RequestMetaFromContext returns the RequestMeta attached to ctx, if any. It is exported so the packages that stamp identity — internal/llmloop and int

SealSelected closes the selected set. After it returns, RegisterSelected fails and the coverage denominator is fixed; per-item Mark* calls continue to

SetPendingFailureCause records the classification Finalize must use when it sweeps items that never received a Mark*. It records no run_failure and tr

Tool returns which tool this provider implements.

ValidateScanOptions verifies that the previous session was a full-file scan.

executeReviewFilter runs the REVIEW_FILTER_TASK to remove comments that are provably incorrect based solely on the diff. Errors are logged and silentl

freezeOne freezes c and returns the single listed request.

isolateLLMConnectionTest keeps the "Testing connection..." step that ends every apply*Config call away from the developer's own machine. Without it re

newQuietHandle routes [ocr] progress lines away from stdout so they cannot corrupt a structured output document. What it does depends on why stdout ne

recordWarning adds a non-fatal warning to the agent's warning list.

retryCodesMiddleware returns an HTTP middleware that forces the SDK to retry responses whose status code is in the given set, by injecting the x-shoul

sanitizeReason is the single, best-effort redaction+truncation floor applied to every reason the builder stores, so no caller path can write an unreda

AnyToAttr converts an arbitrary value to an OTel attribute.KeyValue.

BuildReLocationMessages renders the re-location prompt for cm against d. Returns nil when the task template is absent or empty, which the caller treat

CommentsForPath returns a copy of comments whose Path matches the given path.

DiscoverRepos walks the sessions root and returns one entry per subdirectory.

ErrorEvent emits an error event with error status.

Finalize performs the hard-validated close of the run and returns the immutable manifest. In order it: sweeps any item still selected into failed (col

IsPathExcluded returns true when relPath matches any of the supplied gitignore-style patterns or any default excluded directory prefix (see ExcludedDi

NewProvider creates a Provider for range mode: from..to (via merge-base).

RecordLLMResult sets the outcome of an LLM request on the span.

RecordUsage adds the prompt/completion/cache tokens reported by an LLM response to the runner's aggregate counters. Used by callers (plan phase in age

ResolveIdentity computes the identity a review with these args would record, without creating anything: no session, manifest, runner or LLM call. Resu

RunManifest returns the frozen v1 coverage result for review runs. Scan remains legacy and returns nil.

SessionID returns the current scan's persisted session ID. It returns an empty string when no session file exists.

emitFailureUsage writes a best-effort structured usage record to stderr when a review fails, so the outer caller still sees the cost of the failed att

filterLargeDiffs drops diffs whose diff content alone consumes more than 80% of MaxTokens.

loadLLMRuntime loads tool defs from toolConfigPath, reads the app config from the user's default config path (applying the configured language to tpl

mapResponsesResponse converts the SDK Response into the shared ChatResponse. Text output is read via the SDK's OutputText() helper (it walks all outpu

peekSession reads the first record, all review_item records (for comment count), and the last record of a JSONL file.

End-to-end coverage of the #368 P5 wiring: a real review run against the fake Anthropic server, driven through runReview so review_cmd.go's own Freeze

validateReviewRefs rejects ref-option injection (#112): any --from/--to/ --commit value must be a real commit ref and must not start with '-'.

CanonicalPath returns an absolute path with symlinks resolved.

IsUserExcluded reports whether the given path matches any user exclude pattern. The check is case-insensitive: both path and pattern are lowercased.