gitOut runs a git command in dir and returns its trimmed stdout, failing the test on error. Used to capture the SHAs a ResolveInput result must match.

hashFields folds a sequence of string fields into one SHA-256 digest, writing an unambiguous 8-byte big-endian length prefix before each field so no t

loadDiffs populates the diff-related fields.

logicalRequestID computes the canonical logical_request_id for m under runID. Fields are NUL-terminated in a fixed order rather than concatenated, be

manifestItemID derives the content-independent item_id for a diff, keyed on operation, input mode and the normalized old/new paths. RegisterSelected a

maybeRunDedup, when the template has a DedupTask and the batch produced at least DedupMinComments comments, invokes the DEDUP_TASK LLM to merge near-d

maybeRunProjectSummary runs the post-batch PROJECT_SUMMARY_TASK over the union of all collected comments. Best-effort: any error / empty input no-temp

mergeBackground combines the inline --background value (or an auto-populated commit message) with the content read from --background-file, separated b

parentState builds a resumable parent: a v1 review manifest whose identity is parentIdentity, run on anthropic/claude, with one selected item. mutate

planEnabled / dedupEnabled / summaryEnabled report whether each optional phase will actually run: template must define it AND the corresponding --no-*

Drive post() over a sequence of per-call fake_urlopen outcomes. Each outcome is either the raw response body (bytes, returned) or an

readRuleFileSafe reads and validates a rule file. It enforces extension whitelist (.md / .txt / .markdown), a 512 KB size cap, and resolves symlinks b

runSessionCommentsCompat provides test compatibility for old-style runSessionComments([]string{...}) calls.

AwaitKey blocks until every unit submitted under key so far has completed. It never touches the pool-wide WaitGroup, so it is safe to call while other

DefaultConfig returns a disabled default configuration.

HasInclude reports whether any include patterns are configured.

HasPersistence reports whether this session has a JSONL writer. A false value means no resumable session file exists, even though the run still has it

IsReserved reports whether name matches any built-in tool name (including Unknown).

LoadComments replays one session's JSONL and returns every review comment recorded in it, in file-completion order. It mirrors resume replay semantics

LoadGitignorePatterns reads and parses .gitignore patterns from the given repository root. Returns nil if the file is missing or unreadable.

NewRemoteClient connects to a remote MCP server via Streamable HTTP transport. Header values may contain $ENV_VAR references which are expanded at run

NewResumeLineage builds the lineage for an accepted resume of parent. It returns nil when there is nothing to record — no parent, or a parent with no

NewSessionKey returns a fresh UUIDv4 session key. Clients use it as a per-client fallback for requests whose context carries no session key (e.g. `ocr

ParseExtraHeaders parses a string of comma-separated key=value pairs into a dictionary. Values may be double-quoted to include commas, e.g. X-Forwarde

PrintTraceSummary prints a one-line summary of the review to stdout.

ProjectSummary is the markdown project-level summary produced by scan's PROJECT_SUMMARY_TASK. Empty for review mode and for scans that skipped / faile

RecordToolResult sets the outcome of a tool execution on the span.

RecordWarning adds a non-fatal warning.

ResumeInfo returns resume metadata for output. Nil means this was not a resume run.

SessionID returns the current scan's persisted session ID. It returns an empty string when no session file exists.

SessionID returns the persisted session identifier so callers can show it in JSON output or failure diagnostics. Returns "" when no session was create

SetParentRunID links this run to the session it resumed from. It only records the direct parent; the parent's input is never copied into this run.

Shutdown flushes and shuts down all initialized providers. It should be called before process exit to ensure buffered data is exported.

ToToolDef converts an MCP tool definition to an llm.ToolDef.

UseTestSessions redirects session persistence to the "test-sessions" subdirectory so that test runs do not pollute the real sessions store. It must b

ValidateResume reports whether req may reuse this parent's checkpoints. A mismatch on any input field rejects the whole resume rather than degrading

WithinBase reports whether target is base itself or contained under base.

buildAllowedHosts returns the default-deny allowlist used by the host guard. The set always includes the standard loopback names. If bindHost is a con

ensureMessagesSuffix appends /v1/messages to base URLs that lack a versioned path.

estimateDiffFileTokens projects the input+output token cost of reviewing a single diff (PLAN + MAIN_TASK rounds). It mirrors scan.estimateFileTokens b

executePlanPhase runs the plan task for a single file, sending template messages with resolved placeholders and collecting the LLM response as plan gu

expandSessionKeyInBody returns a copy of body with SessionKeyTemplateVar replaced by key in every string value, recursing into nested maps and slices.

expandSessionKeyInHeaders returns a copy of headers with every occurrence of SessionKeyTemplateVar in the values replaced by key. The input map is nev

filterLargeScans drops items whose content exceeds 80% of MaxTokens.

finalizeManifest freezes the run's coverage builder and stores the immutable manifest on the session for persistence and CLI consumption. Nil-safe. A

firstLine returns the first non-empty trimmed line of git output, so a stray trailing newline or an unexpected second line never pollutes a resolved S

formatPlanGuidance parses the PLAN_TASK JSON output into a markdown snippet suitable for embedding in MAIN_TASK. On parse failure it returns the raw c

humanTokens formats a token count as e.g. "1.2M" / "850K" / "420".

humanTokens formats a token count as e.g. "1.2M" / "850K" / "420". Mirrors internal/scan/estimate.go; kept here so agent has no scan import.

isMachineReadable reports whether the output format writes a structured document to stdout that must not be interleaved with progress text. Both json

isUserEditMsg reports whether msg represents user text input (typing or paste).

loadTestTemplate returns a validated default template for runtime tests.