explainError translates a Bedrock rejection into the action that fixes it. Two of these are actively misleading as the service words them: the API-key

filterLargeScans drops items whose content exceeds 80% of MaxTokens.

finalizeManifest freezes the run's coverage builder and stores the immutable manifest on the session for persistence and CLI consumption. Nil-safe. A

firstLine returns the first non-empty trimmed line of git output, so a stray trailing newline or an unexpected second line never pollutes a resolved S

formatPlanGuidance parses the PLAN_TASK JSON output into a markdown snippet suitable for embedding in MAIN_TASK. On parse failure it returns the raw c

humanTokens formats a token count as e.g. "1.2M" / "850K" / "420".

humanTokens formats a token count as e.g. "1.2M" / "850K" / "420". Mirrors internal/scan/estimate.go; kept here so agent has no scan import.

isMachineReadable reports whether the output format writes a structured document to stdout that must not be interleaved with progress text. Both json

isUserEditMsg reports whether msg represents user text input (typing or paste).

loadTestTemplate returns a validated default template for runtime tests.

maybeRunPlan invokes PLAN_TASK on the file and returns a human-readable guidance string suitable for {{plan_guidance}} substitution. Returns "(no pre-

mustGetResult extracts the first result from a SARIF document, failing the test if the structure is wrong.

newCompressionRunner returns a Runner whose template forces runCompression to issue a request, plus the message slice to feed it.

newRetryObserver builds the middleware that feeds collector. It sits inside the SDK retry loop, so it runs once per real HTTP attempt and sees neithe

normalizeLine removes leading/trailing whitespace and strips any leading '+' or '-' diff marker.

The four blind spots share one shape: the observer sees HTTP 200, the failure surfaces afterwards, and nothing downstream would notice the omission —

partitionMessages divides messages into frozen, compress, and active zones. Frozen zone is always messages[0:2]. Active zone preserves the K most rece

reloadConfigAfterSaveFailure reloads on-disk config and refreshes derived provider TUI state so the UI matches persisted data after a failed save. Ret

reloadConfigAfterSaveFailure reloads on-disk config so in-memory state matches persisted data after a failed save. Returns false when reload could not

resolveRepoDir resolves the repo dir for `ocr rules check`. It delegates to resolveWorkingDir(requireGit=true) so it anchors at the git top-level just

resolveWorkingDirForSession accepts an explicit --repo flag value and falls back to the current working directory. Unlike resolveRepoDir it does not r

reviseAttempt applies a client-boundary correction to the last attempt of the logical request identified by ctx. Requests without identity (scan, llm

ruleConfigSHA256 is the deterministic identity of the resolved rule configuration this run operates with: the resolver's effective rule-text layers (c

sarifInvocationFromRun builds the run.invocations entry from the manifest's terminal state and any warnings collected during the review. executionSuc

sarifResultFromComment maps a single LlmComment to a SARIF result. Field mapping follows FR-3 in the requirements spec: - Path → locations[].

sourceArtifactSHA256 is the deterministic content identity of this run's selected input: for every non-deleted diff (the same set registerCoverage sea

statusBadge renders the per-file status tag. The letter carries the meaning, so with color disabled the bare "[A]"/"[M]"/... form is still unambiguous

transition moves a selected item to a terminal state through the single coverage entry point. Unknown item_id, an invalid failed classification, an em

triggerAsyncCompression kicks off a background compression job for the conversation owning st. A no-op when a job is already pending — the check-and-s

valid reports whether c is one of the fixed attempt error classes.

valid reports whether c is one of the fixed item failure classes.

validateTimeoutSec converts a config-file timeout (in seconds) to time.Duration. Returns 0 for zero input (use default). Rejects negative values and o

writeCommit writes content to name, stages it, and commits with msg.

CallTool invokes a tool on the MCP server and returns the text result.

CollectPendingComments awaits any async comment-processing workers and returns the aggregated comments from the collector. Safe to call once per sessi

CompletionsWithCtx sends a Responses API request and maps the result back to the shared ChatResponse shape. The deferred finalizeRequest is this clie

ComputeLineDiff returns a line-level diff between oldLines and newLines. Uses Myers-style LCS to find common subsequences, then emits context/added/de

ContentLogging returns true when content logging is enabled via OCR_CONTENT_LOGGING.

DisplayAddr rewrites a wildcard listen address (empty host, 0.0.0.0, or ::) to a localhost form so printed URLs are always openable in a browser. Non-

FinalManifest returns the frozen manifest stored for this run, or nil when the run produced none (legacy/scan, or a construction failure).

Get returns the diff text for path.

ListSessions returns lightweight summaries for all sessions in a repo subdir.

LoadReviewResumeState replays a review session, dropping records it cannot parse. Review reuse is gated on the parent manifest rather than on these li

MergeBase returns the computed merge-base commit hash for range mode.

NewClient starts an MCP server subprocess (stdio transport), initializes the connection, and caches the list of available tools. The context governs t

NewCommentWorkerPool delegates to llmloop.NewCommentWorkerPool.

NewToolCallMessage creates an assistant message with text content and tool invocations.

Of returns a checkpoint with data.

ParseRetryCodes parses a comma-separated list of HTTP status codes that should trigger retry. Non-4xx codes return an error; SDK-default codes (408, 4

ParseReviewMode returns the correct ReviewMode based on provided flag values.

PrintToolCallStarted prints a line when a tool begins execution. Args are summarized as key-value pairs (path, search terms, etc.). Example: [ocr] ▶

RecordResumeLineage persists the run's single resume_lineage event. A nil lineage is a non-resumed run and writes nothing.

RemoveByPathAndIndices removes comments for a given path whose per-path index (0-based position among all comments with that path) is in the indices s

Resolve returns the rule text for a given file path. Patterns with brace expansion like "*.{go,py}" are expanded into "*.go", "*.py". The first match

ResolveConfig builds the final Config by merging defaults, JSON config, and env vars. Precedence: defaults < config.json < environment variables.