printDiffLine renders a single diff line with colored prefix and background on content.

probePathIndex is like probePath but also returns the index of the matched path.

工作区模式仅刷新变更文件，不等待 VS Code Git 扩展，也不拉分支/提交历史。

registerReviewFlags registers all review command flags on cmd, binding to opts.

registerScanFlags registers all scan command flags on cmd, binding to opts.

renderMessages substitutes placeholders in the scan template's MainTask for a single scan item. planGuidance is the output of maybeRunPlan and gets su

通过 git rev-parse 解析仓库根，避免等待 VS Code Git 扩展初始化。

requireGitRepo validates that the given directory is part of a git repository.

resolveEnv reads environment variables to override defaults. Environment takes highest priority.

resolveFromFileContent scans the new file content line-by-line for consecutive matches of the normalized existing_code.

resolveFromHunk tries to find startLine/endLine by matching ExistingCode against hunk lines. It tries the new-side first (context + added lines → new-

resolveSystemRule returns the rule text for a given file path, matching against PathRuleMap glob patterns, falling back to DefaultRule.

resolver returns the rules Resolver, asserting DetailResolver if available.

responseRequestID reads the provider's request identifier. Anthropic sends request-id and OpenAI sends x-request-id; the observer is shared by all thr

reviewMode returns the string mode identifier.

runReview provides test compatibility for the pre-cobra runReview(args) entry point: parse flags, then execute the review.

runeWrapCut returns a rune index suitable for breaking the line at ~maxW display width.

runtimeConfigSHA256 is the deterministic identity of the allowlisted, non-secret runtime settings: protocol, model, sanitized endpoint host, language,

sanitizeEndpointHost extracts the credential-free host[:port] from a full LLM endpoint URL, dropping scheme, any embedded userinfo, path, query and fr

Strip C0/C1 control characters from a metadata value.

sarifRules returns the 8 built-in category rule definitions. Every result's ruleId must resolve to one of these rules.

sarifSeverityLevel maps an OCR severity string to a SARIF result level. critical/high → error, medium → warning, low → note. Empty/unknown falls back

savedSecretFingerprint returns a short fingerprint for display, e.g. "sk-a1b2...wxyz" (first 6 + "..." + last 4). Returns "" when the trimmed secret i

* 选出与 workspace 匹配的仓库。嵌套仓库场景下 repositories 顺序不稳定, * 不能直接取 [0],否则会漂移到子仓库。

setShellRCHome points os.UserHomeDir at dir. shellRCFiles resolves the home dir through os.UserHomeDir, which reads USERPROFILE on Windows and never f

severityColor maps a finding severity to an ANSI color used for its badge. Unknown or empty severities fall back to dim.

shouldMaskConfigValue reports whether the echoed value of a config key holds a secret and must be masked. Matching on the normalized suffix covers bot

* Strip YAML frontmatter from markdown content

stripMarkdownFences is the package-private workhorse used by the internal compression code paths.

summarizeArgs extracts a concise key=value summary from tool arguments for console display. It picks the most human-readable fields depending on the a

tryCCEnv reads Claude Code environment variables.

tryShellRC parses ~/.zshrc and ~/.bashrc for ANTHROPIC_* exports.