describe renders m for internal construction errors raised by RetryCollector.Freeze. Those errors reach the user through runErr, and with --concurren

ensureModelInList appends model to the end when missing; never reorders existing entries.

Positional-argument validators that replace Cobra's raw count message ("accepts 2 arg(s), received 1") with an actionable one built from metadata the

executeSubtask runs the scan pipeline for one file: 1. Optional PLAN_TASK: produce a JSON checklist of focus areas. 2. MAIN_TASK: review the file with

executeSubtask performs the Plan Phase + Main Loop for a single file. It returns (completed, stop, err): a hard Go error (err) for provider/config/ctx

extractFilenameFromURL returns the filename part (last path segment) of a URL pattern.

filterDiffs drops diffs that should not be reviewed based on user-configured include/exclude patterns and default extension/path filters.

finalizeRequest is the shared body of the client-boundary defer: correct the last attempt if the error only became visible after the SDK returned, the

gitOut runs a git command in dir and returns its trimmed stdout, failing the test on error. Used to capture the SHAs a ResolveInput result must match.

hashFields folds a sequence of string fields into one SHA-256 digest, writing an unambiguous 8-byte big-endian length prefix before each field so no t

loadDiffs populates the diff-related fields.

logicalRequestID computes the canonical logical_request_id for m under runID. Fields are NUL-terminated in a fixed order rather than concatenated, be

manifestItemID derives the content-independent item_id for a diff, keyed on operation, input mode and the normalized old/new paths. RegisterSelected a

maybeRunDedup, when the template has a DedupTask and the batch produced at least DedupMinComments comments, invokes the DEDUP_TASK LLM to merge near-d

maybeRunProjectSummary runs the post-batch PROJECT_SUMMARY_TASK over the union of all collected comments. Best-effort: any error / empty input no-temp

mergeBackground combines the inline --background value (or an auto-populated commit message) with the content read from --background-file, separated b

parentState builds a resumable parent: a v1 review manifest whose identity is parentIdentity, run on anthropic/claude, with one selected item. mutate

planEnabled / dedupEnabled / summaryEnabled report whether each optional phase will actually run: template must define it AND the corresponding --no-*

Drive post() over a sequence of per-call fake_urlopen outcomes. Each outcome is either the raw response body (bytes, returned) or an

readRuleFileSafe reads and validates a rule file. It enforces extension whitelist (.md / .txt / .markdown), a 512 KB size cap, and resolves symlinks b

resolvedModel returns the model to persist, falling back to the in-session pick for the provider being finalized when result.model is empty.

runSessionCommentsCompat provides test compatibility for old-style runSessionComments([]string{...}) calls.

AwaitKey blocks until every unit submitted under key so far has completed. It never touches the pool-wide WaitGroup, so it is safe to call while other

DefaultConfig returns a disabled default configuration.

HasInclude reports whether any include patterns are configured.

HasPersistence reports whether this session has a JSONL writer. A false value means no resumable session file exists, even though the run still has it

IsReserved reports whether name matches any built-in tool name (including Unknown).

LoadComments replays one session's JSONL and returns every review comment recorded in it, in file-completion order. It mirrors resume replay semantics

LoadGitignorePatterns reads and parses .gitignore patterns from the given repository root. Returns nil if the file is missing or unreadable.

NewRemoteClient connects to a remote MCP server via Streamable HTTP transport. Header values may contain $ENV_VAR references which are expanded at run

NewResumeLineage builds the lineage for an accepted resume of parent. It returns nil when there is nothing to record — no parent, or a parent with no

ParseExtraHeaders parses a string of comma-separated key=value pairs into a dictionary. Values may be double-quoted to include commas, e.g. X-Forwarde

ProjectSummary is the markdown project-level summary produced by scan's PROJECT_SUMMARY_TASK. Empty for review mode and for scans that skipped / faile

Quiet replaces stdout with io.Discard and returns a cleanup function. Usage: defer stdout.Quiet()() WARNING: Quiet must ONLY be called from the mai

RecordToolResult sets the outcome of a tool execution on the span.

ResumeInfo returns resume metadata for output. Nil means this was not a resume run.

ReusableItem returns the checkpoint for fingerprint only if the parent manifest also recorded that fingerprint as completed or reused. The manifest i

SessionID returns the current scan's persisted session ID. It returns an empty string when no session file exists.

SessionID returns the persisted session identifier so callers can show it in JSON output or failure diagnostics. Returns "" when no session was create

SetParentRunID links this run to the session it resumed from. It only records the direct parent; the parent's input is never copied into this run.

Shutdown flushes and shuts down all initialized providers. It should be called before process exit to ensure buffered data is exported.

Swap replaces the stdout writer with replacement and returns a restore function. It lets tests capture output written through Writer(), and lets calle

ToToolDef converts an MCP tool definition to an llm.ToolDef.

UseTestSessions redirects session persistence to the "test-sessions" subdirectory so that test runs do not pollute the real sessions store. It must b

WithinBase reports whether target is base itself or contained under base.

buildAllowedHosts returns the default-deny allowlist used by the host guard. The set always includes the standard loopback names. If bindHost is a con

captureStderr swaps os.Stderr for a pipe around fn and returns what was written. Output here is tiny, so reading after the writer is closed avoids any

colorize wraps s in seq and a reset, or returns s untouched when color is off. Every escape sequence in the text output path is gated through here or

ensureMessagesSuffix appends /v1/messages to base URLs that lack a versioned path.

estimateDiffFileTokens projects the input+output token cost of reviewing a single diff (PLAN + MAIN_TASK rounds). It mirrors scan.estimateFileTokens b

executePlanPhase runs the plan task for a single file, sending template messages with resolved placeholders and collecting the LLM response as plan gu

expandSessionKeyInBody returns a copy of body with SessionKeyTemplateVar replaced by key in every string value, recursing into nested maps and slices.

expandSessionKeyInHeaders returns a copy of headers with every occurrence of SessionKeyTemplateVar in the values replaced by key. The input map is nev