ResolveEndpointWithOptions resolves an endpoint by first honoring an explicit provider selection. Otherwise it processes config, environment, then she

SetError records an error for this task record, writes an llm_error entry to the JSONL stream, and increments the session-level LLM failure counter.

RegisterSelected records an item in the selected set (the coverage denominator). It must be called once per item during the pre-dispatch pass, after f

ValidateOptions verifies that the requested review range matches the prior session.

executeToolCall dispatches a single tool call from the LLM response and records the result in session history. code_comment handling includes optional

GetDiff returns all changes as parsed model.Diff structs.

LoadResumeState replays a previous session JSONL into a fingerprint index.

NormalizeAuthHeader normalizes an auth header value to a canonical form. It returns an error for unrecognized values.

Read returns the full content of a file path (relative to RepoDir), resolved according to the active review mode. - Workspace: reads directly from the

cloneProviderEntry deep-copies a ProviderEntry so callers (rollback paths, map cloning) can safely mutate the returned value without aliasing the orig

newModelTUI builds a model-only TUI for tests. It has no config path or existing config, so add/delete/persist operations are unavailable — use newMod

Await blocks until all submitted work has completed and returns aggregated results from every Submit call so far. A panic in submitted work is recove

Manifest returns the run's coverage builder, or nil for legacy/scan sessions that did not opt in via SessionOptions.Operation. Callers must be nil-saf

SessionFilePath returns the JSONL path for a persisted session.

SetAttr sets a single attribute on a span.

CompletionTokenLimit returns the output cap for LLM requests. Runtime prompt-limit overrides must not silently expand the model's output budget.

LoadDefault parses the embedded system_rules.json and resolves rule file references.

NewManifestBuilder creates a builder for a run identified by runID (the canonical session ID) and operation ("review" or "scan").

NewProvider creates a Provider that enumerates the repository at repoDir. If paths is non-empty each element must be a repo-relative path (file or dir

NewWorkspaceProvider creates a Provider for workspace mode (current uncommitted changes).

Output executes a git command and returns stdout only.

RecordReviewItemFailed persists an incomplete file-level checkpoint.

SetResponse records the LLM response in the most recent TaskRecord of the given type. It uses actual token usage from the API response when available,

beginAPIKeyReplace switches from the fixed-length mask placeholder to edit mode so the next keystroke or paste fully replaces the saved key. While edi

Default config file location: ~/.opencodereview/config.json

expandBraces turns "{a,b,c}" style patterns into individual strings. e.g. "*.go.{java,kotlin}" → ["*.go.java", "*.go.kotlin"]. If no braces exist, ret

gitCommitFile writes a file and commits it, returning after the commit lands.

matchConsecutive scans sideLines for a consecutive run matching all targetLines.

resolveUsage parses raw JSON bytes into a map and extracts token usage by probing configured paths sequentially. Returns nil if no total_tokens found.

silenceStdout redirects os.Stdout to /dev/null for the duration of fn so the delegate commands' Printf output does not clutter test logs.

whyExcluded applies the filter algorithm as shouldReview but returns the specific reason a file is excluded.

writeTempFile writes content to a temporary file and returns its path.

Dynamic creates a Tool with the given name for dynamically discovered tools (e.g. MCP).

Enumerate returns one ScanItem per reviewable file. Binaries are emitted with empty Content + IsBinary=true so previews can show them as excluded.

Event emits a structured event as a span with immediate end.

NormalizeProtocol canonicalizes protocol names. It is case-insensitive and trims whitespace. Empty string is returned as-is (the caller decides the de

ParseDiffText splits the unified diff text into per-file Diff structs. ref, if non-empty, is a git ref used to read new-file content via git show inst

Restore re-enables stdout. Safe to call multiple times.

SetRunFailure records why the whole run stopped. It rejects an invalid class (so an unclassifiable stop is never silently downgraded) and a change of

buildAnthropicParams converts the shared ChatRequest into Anthropic SDK parameters.

loadCommonContext validates the working directory, loads the embedded template, raises MaxToolRequestTimes when maxTools exceeds the default, resolves

resolveWorkingDir returns (absPath, isGitRepo, err). When requireGit is true, returns an error if the directory is not a git repo. When false, returns

ApplyLanguage injects a language directive into all system-role messages across MAIN_TASK, PLAN_TASK (if set), and MEMORY_COMPRESSION_TASK.

IsUserIncluded reports whether the given path matches any user include pattern. Returns false when Include is empty (no user include restriction defin

LoadDefault parses the embedded task_template.json and resolves prompt file references.

LoadScanDefault parses the embedded scan_template.json.

NewCommitProvider creates a Provider for commit mode: show changes introduced by a single commit.

NewDiffMap creates a frozen, read-only DiffMap from a plain map.

PromptTokenLimit returns tokenWarningThreshold (80%) of maxTokens. It is shared by the agent and scan pre-flight gates, their large-input filters, and

RegisterAll registers tools from the MCP client into the tool registry. When allowedTools is non-empty, only tools whose names appear in the list are

ResolveEndpointWithModelOverride is a compatibility wrapper around ResolveEndpointWithOptions for callers that only override the model.

SealSelected closes the selected set. After it returns, RegisterSelected fails and the coverage denominator is fixed; per-item Mark* calls continue to

Tool returns which tool this provider implements.

ValidateScanOptions verifies that the previous session was a full-file scan.

buildResponsesParams converts the shared ChatRequest into Responses API parameters. Mapping notes: - Multiple system messages are concatenated into I