--- helpers ---

unwritableConfigPath returns a config path whose parent is a regular file, so any saveConfig / loadOrCreateConfig against it fails (ENOTDIR). This is

AsDiff returns a Diff suitable for handing to code that expects the diff-based shape (line-number resolver, file_read_diff tool). The Diff field stays

BudgetExceeded reports whether the aggregate token budget gate stopped the run before all files were reviewed. It is a diagnostic signal only — it fee

CollectToolDefs gathers tool definitions from MCP clients, filtering out tools that conflict with built-in tools or were not successfully registered.

ContextWithTraceParentFromEnv extracts W3C traceparent from the TRACEPARENT environment variable and returns a context carrying the upstream span cont

CountMessagesTokens returns the rough token count of msgs by summing the per-message text token count. Exported because both review and scan top layer

Frozen reports whether Finalize has already run.

Init initializes global TracerProvider and MeterProvider based on environment variables and optional config file. Returns true when enabled. Safe to c

ListSessions enumerates all persisted sessions for the given repository directory, sorted by StartTime descending (most recent first). Missing directo

Load parses the tools config file. When path is empty, falls back to the embedded default tools configuration.

LoadAppConfig loads config from path. Returns nil, nil if file does not exist.

LoadSummary loads a single session's Summary. Errors when the session file is missing or unreadable.

ReLocateComment calls the LLM to regenerate a precise existing_code snippet when text-based matching fails, then retries ResolveComment with the new s

ReplaceSince replaces comments[start:] with the given replacements. Useful for batch-level dedup: take a Snapshot, run a batch, dedup the new comments

ResolveComment attempts to resolve StartLine/EndLine for a single comment by matching ExistingCode against the diff. Returns true on success.

Run executes a git command and returns the combined stdout+stderr output.

SetFinalManifest stores the frozen manifest the agent produced. It is embedded into session_end by Finalize and returned to the CLI via FinalManifest.

StartLLMSpan creates a span for an LLM request with standard attributes.

String renders a one-line human-readable estimate, matching scan.Estimate's format so diff and scan warnings read consistently. Money is intentionally

Submit runs f in a background goroutine bounded by the semaphore. When f completes its return value is collected internally.

TraceIDFromContext returns the hex-encoded trace ID of the span carried by ctx, or "" if ctx carries no valid span (e.g. telemetry is disabled).

applyDedupGroups parses the DEDUP_TASK output and returns the deduped comment slice. Returns (nil, false) when the response is malformed OR when the g

cancelPendingCompression aborts the conversation's in-flight background compression, if any.

ensureModelInList appends model to the end when missing; never reorders existing entries.

executeSubtask performs the Plan Phase + Main Loop for a single file. It returns (completed, stop, err): a hard Go error (err) for provider/config/ctx

extractFilenameFromURL returns the filename part (last path segment) of a URL pattern.

gitOut runs a git command in dir and returns its trimmed stdout, failing the test on error. Used to capture the SHAs a ResolveInput result must match.

hashFields folds a sequence of string fields into one SHA-256 digest, writing an unambiguous 8-byte big-endian length prefix before each field so no t

manifestItemID derives the content-independent item_id for a diff, keyed on operation, input mode and the normalized old/new paths. RegisterSelected a

mergeBackground combines the inline --background value (or an auto-populated commit message) with the content read from --background-file, separated b

planEnabled / dedupEnabled / summaryEnabled report whether each optional phase will actually run: template must define it AND the corresponding --no-*

Drive post() over a sequence of per-call fake_urlopen outcomes. Each outcome is either the raw response body (bytes, returned) or an

readRuleFileSafe reads and validates a rule file. It enforces extension whitelist (.md / .txt / .markdown), a 512 KB size cap, and resolves symlinks b

runSessionCommentsCompat provides test compatibility for old-style runSessionComments([]string{...}) calls.

AwaitKey blocks until every unit submitted under key so far has completed. It never touches the pool-wide WaitGroup, so it is safe to call while other

DefaultConfig returns a disabled default configuration.

HasInclude reports whether any include patterns are configured.

HasPersistence reports whether this session has a JSONL writer. A false value means no resumable session file exists, even though the run still has it

IsReserved reports whether name matches any built-in tool name (including Unknown).

LoadComments replays one session's JSONL and returns every review comment recorded in it, in file-completion order. It mirrors resume replay semantics

LoadGitignorePatterns reads and parses .gitignore patterns from the given repository root. Returns nil if the file is missing or unreadable.

NewRemoteClient connects to a remote MCP server via Streamable HTTP transport. Header values may contain $ENV_VAR references which are expanded at run

ParseExtraHeaders parses a string of comma-separated key=value pairs into a dictionary. Values may be double-quoted to include commas, e.g. X-Forwarde

PrintTraceSummary prints a one-line summary of the review to stdout.

ProjectSummary is the markdown project-level summary produced by scan's PROJECT_SUMMARY_TASK. Empty for review mode and for scans that skipped / faile

RecordToolResult sets the outcome of a tool execution on the span.

RecordWarning adds a non-fatal warning.

ResumeInfo returns resume metadata for output. Nil means this was not a resume run.

SetExecution sets the non-secret execution provenance.

SetParentRunID links this run to the session it resumed from. It only records the direct parent; the parent's input is never copied into this run.

SetRepository sets the redacted repository identity.

Shutdown flushes and shuts down all initialized providers. It should be called before process exit to ensure buffered data is exported.

ToToolDef converts an MCP tool definition to an llm.ToolDef.

TotalInputTokens returns the accumulated input/prompt tokens from all LLM calls.

UseTestSessions redirects session persistence to the "test-sessions" subdirectory so that test runs do not pollute the real sessions store. It must b

WithinBase reports whether target is base itself or contained under base.