resolveAllowedHostsFromEnv reads the OCR_VIEWER_ALLOWED_HOSTS environment variable and combines it with the bind host to produce the active allowlist.

resolveConfigPath returns OCR_CONFIG_PATH when set, otherwise the default user config path. Intentionally used only by read-only commands (e.g. ocr ll

resolveLang returns the resolved language name for the instruction.

resolveMaxTokens applies the per-run CLI override, then the saved setting, and finally the embedded task-template default.

ruleConfigSHA256 is the deterministic identity of the resolved rule configuration this run operates with: the resolver's effective rule-text layers (c

runSessionListCompat provides test compatibility for old-style runSessionList([]string{...}) calls.

runSessionShowCompat provides test compatibility for old-style runSessionShow([]string{...}) calls.

sanitizeRetryCodes filters out SDK-default codes (408, 409, 429) and returns the remaining valid codes, any warnings for filtered codes, and an error

savedSecretReplaceHint builds the replace hint text without leading indent.

scanLines reads from r line by line, collecting at most maxLines lines starting from startLine (1-based), while counting the total number of lines. Th

securityHeaders wraps a handler and sets defense-in-depth response headers on every reply. These harden the local viewer's browser-facing surface (the

shouldReview applies the filter algorithm via whyExcluded.

shouldSkipFile returns true if a git ls-files output path should be skipped. Keeps only widely useful files (those with recognizable extensions).

splitAndNormalize splits code text into lines and normalizes each one.

splitBindHost returns the host portion of a listen address as passed to http.Server.Addr. Empty input returns "".

stripEmptyPlanBlock removes the "### Review Plan …\n{{plan_guidance}}\n\n" wrapper from a MAIN_TASK user message when the plan phase produced no guida

stripThinkTags removes reasoning wrapper tags from content.

triggerAsyncCompression kicks off a background compression job for the conversation owning st. A no-op when a job is already pending — the check-and-s

Find-or-create/update a summary note. Sticky matches the cross-run :data:`SUMMARY_MARKER`; non-sticky matches this run's ``tag`` (per-run), s

等待至少一个仓库就绪（git 扩展异步扫描，首次可能为空）。

whyExcluded mirrors agent.whyExcluded but for ScanItem inputs.

writeGarbageExternalDiff writes a shell script that emits non-diff output and returns its path. When git invokes it via GIT_EXTERNAL_DIFF / diff.exter

writeRangeResumeSession persists a range-mode session with the given completed file checkpoints and returns its ID. HOME must already point at a temp

AddToolResult appends a tool call result to this task record and writes a tool_call record to the JSONL stream.

ApplyLanguage injects a language directive into all system-role messages of this conversation.

BuildToolDefs converts toolsconfig.ToolConfigEntry slice into []llm.ToolDef, filtering by phase (planOnly=true for plan_task, false for main_task).

Complete returns a checkpoint signaling task completion.

EndSpan ends the span and records error status if present.

Eventf is like Event but includes a message attribute.

Fail returns a checkpoint signaling terminal task failure.

FormatDuration returns a human-readable duration string for console output.

GroupRules groups the given file paths by their resolved rule content. Files are placed in the same group only when their source, matched pattern, and

HomeConfigPath returns the default path to ~/.opencodereview/config.json.

initEmbeddedLoader configures tiktoken to use embedded BPE data instead of fetching from network. Call this once during application startup, before an

IsKnown reports whether the tool is not UNKNOWN.

ItemID is the single, canonical derivation of a manifest item_id. It is content-independent: it is derived from the operation, the input mode and the

LLMFailures returns the total number of LLM request failures recorded during this session.

LoadDefault parses the embedded task.json and returns the TEST_TASK conversation.

LoadFromJSON merges telemetry settings from a JSON config file if present. This has lower priority than environment variables.

Name returns the tool's identifier name.

NewCommentWorkerPool delegates to llmloop.NewCommentWorkerPool.

NewToolResultMessage creates a tool-role message with the given result. Uses the OpenAI Chat Completions format: role="tool" with tool_call_id and pla

ParseReviewMode returns the correct ReviewMode based on provided flag values.

PhaseEvent records a review phase completion with duration and optional error.

Preview loads diffs and applies the filter algorithm, returning structured preview data without dispatching any LLM calls. It builds none of the revi

PrintToolCallError prints a line when a tool fails. Example: [ocr] ✘ file_read "internal/config/rules/loader.go" failed: permission denied

PrintToolCallFinished prints a line when a tool finishes successfully. Example: [ocr] ✔ file_read "internal/config/rules/loader.go" (12ms)

ProjectSummary returns the markdown project-level summary produced after all batches finish. Empty when SkipSummary is set, PROJECT_SUMMARY_TASK is ab

Quiet replaces stdout with io.Discard and returns a cleanup function. Usage: defer stdout.Quiet()() WARNING: Quiet must ONLY be called from the mai

RefValue returns the git ref that should be used for reading file contents in range or commit mode. Returns ("", false) for workspace mode.

RemoteIdentity returns a stable, credential-free identity string for the repository's "origin" remote, suitable for hashing into the run manifest's re

RuleGroupsMarkdown renders rule groups into a markdown section.

RunManifest returns the immutable coverage snapshot produced for this review, or nil when manifest construction failed. The scan path deliberately ret

RunSplit executes a git command and returns stdout and stderr separately.

Sealed reports whether the selected set has been sealed.

SessionID returns the current review's resumable session ID. It returns an empty string when the session file could not be created, so callers do not

StartToolSpan creates a span for a tool execution with standard attributes.

Stream acquires the semaphore, starts a git command, and passes its stdout as an io.Reader to consume. The semaphore is held for the full duration. co

ToolCalls extracts tool calls from the first choice.

ToolDefsByPhase returns the parsed tool definitions filtered by phase. planOnly=true returns only tools with plan_task:true. planOnly=false returns on

Warnings returns the warnings recorded by the LLM runner.

WriteSessionStart writes the initial session_start record.

Single GitLab API attempt. Returns a rich result dict (no retry).

Make a GitLab API request with retry on rate-limit and transient errors. Used for reads and note writes (discussions go through the idempotency-a

Compute a retry delay (seconds) for a failed attempt, or None if not retryable. Order: Retry-After header -> wait-until-reset (primary limit exha

Return the first present, non-empty field among several possible key names.

Case-insensitive header lookup.