MaintenanceTimeoutResetSQL returns a statement that disables any per-statement execution timeout for the remainder of the current transaction, or "" i

MarkMessagesDeletedByGmailIDBatch marks multiple messages as deleted by their Gmail IDs in batched UPDATE statements. Much faster than individual Mark

NewControllerTestEnv creates a ControllerTestEnv with a temporary directory and deletion manager wired to the given engine.

NewManager creates an OAuth manager from client secrets.

NewPostgreSQLEngine creates a query engine backed by PostgreSQL. The engine uses PostgreSQLQueryDialect for all SQL generation: $N placeholders via Re

NewXOAuth2Client creates a SASL client for XOAUTH2 authentication.

OpenPostgresDB opens a raw *sql.DB handle for the given PostgreSQL URL using the same connection config (statement_timeout, runtime params) as Store.O

OpenRemoteStore opens a remote store, returning error if not configured. Unlike OpenStore, this always attempts remote connection.

ParseFile reads and parses an .emlx file from disk.

PathTraversalCases returns a fresh slice of path traversal attack vectors for testing path sanitization logic. The returned cases include OS-appropria

RebindPostgreSQL converts `?` placeholders in query to PostgreSQL `$1, $2, ...` numbered placeholders. `?` inside single-quoted string literals is lef

RegisterExtension enables the sqlite-vec extension process-wide and registers a "sqlite3_vec" driver variant of mattn/go-sqlite3. sqlite-vec exposes

RegisterViews creates DuckDB views over the Parquet files in analyticsDir. Each view normalises types and supplies defaults for optional columns that

ResolveAccounts opens the Accounts4.sqlite database at dbPath and resolves the given GUIDs to account information. Returns a map of GUID → AccountInfo

RetitleImessageChats refreshes generated titles on apple_messages conversations whose stored title is still based on raw phone/email handles but whose

Search runs hybrid or vector mode. Resolves the active generation via vector.ResolveActiveForFingerprint, so callers get the full family of sentinel e

SetBackfillFTSBatchErrHookForTest installs (or, with nil, clears) the test-only hook that forces backfillFTSBatch to fail for a chosen id range. Tests

SimulateScopeError injects an insufficient scope error for a specific message ID.

StoragePath returns the content-addressed file path for an attachment: attachmentsDir/<hash[:2]>/<hash>. Returns an error if the content hash is inval

StripHTML removes HTML tags, decodes entities, and normalizes whitespace. Block elements are converted to line breaks for readable plain text output.

TextAggregate aggregates text messages by the given view type.

TimeTruncExpression returns SQL to truncate a timestamp column to a given granularity ("year", "month", "day"). Used in GROUP BY for the Time aggregat

TokenFilePath returns the token file path for an email within the given tokens directory. Use this when you need the path without a full Manager insta

TokenSource returns an oauth2.TokenSource that impersonates the given user via domain-wide delegation. The returned source automatically handles JWT s

TryAcquire attempts to acquire tokens without blocking. Returns true if successful, false if insufficient tokens.

UndoDedup restores soft-deleted duplicates from a dedup batch by clearing deleted_at and delete_batch_id. Merge side effects (labels copied to survivo

V10AccountDir returns the path to a V10 account directory for the given GUID within mailDir. Searches V* directories from newest to oldest, preferring

Validate scans the stream and returns an error if it doesn't look like an MBOX file. It reads up to maxBytes from the stream. This is a heuristic.

ValidateSecure returns an error if the server is configured insecurely without an explicit opt-in via allow_insecure.

VectorIndexName returns the dimension-specific HNSW index name. Exposed mainly for diagnostic purposes.

WithMessage sets the error message.

WithProgress sets the progress reporter.

WithRateLimiter sets a custom rate limiter.

addCommonAggregateFlags adds shared flags to aggregate commands.

aggregateTableView renders the aggregate data table.

applyDetailKey sends a key through handleMessageDetailKeys and returns the concrete Model.

assertAllResults verifies that every result satisfies the given predicate.

assertDescendingOrder verifies that aggregate results are sorted by count descending.

assertFTSContains verifies that exactly wantCount messages match the given term through the SAME production search pipeline the app uses (Store.Search

assertInlineSearchActive checks the model's inlineSearchActive field.

assertPermNoMoreThan checks that the file at path has permissions no more permissive than want. This is umask-tolerant: a umask of 0077 turning 0644 i

assertRecipientCount checks the count of recipients of a given type for a message.

assertSetEqual checks that got and want contain the same elements, ignoring order.

backupDatabase writes a point-in-time consistent copy of the SQLite database to dst using VACUUM INTO. Unlike a file-system copy of the main/-wal/-shm

batchGetRecipients loads recipients for multiple messages in a single query.

buildAPIClient creates the appropriate gmail.API client for the given source. saScopes is used when the resolved oauth_app is backed by a service acco

buildDetailLines constructs the lines for message detail view.

buildFilterQuery builds query parameters for filter endpoints.

buildPGFilterClauses builds the list of SQL WHERE clauses (without leading "AND") that restrict a query to messages matching the structured filter. Ea

buildSearchQueryString reconstructs a search query string from a parsed Query. This is needed because the API expects the raw query string.

byteToRune converts a byte offset into the rune index by binary searching runeByteOffsets. Faster than a linear scan when the offset is far from eithe

chatTitle returns a display title for a chat for progress reporting.

checkCache checks if a valid cached update check exists. Returns (info, true) if a cached result should be used (either an update or no update). Retur

checkRateLimit checks if a rate limit should be triggered. Must be called with mutex held.

claimOrInsertBuilding returns (id, isNew, err). isNew=true means this call inserted a fresh building row; isNew=false means we reused an existing buil

currentSchema returns the connection's first search_path schema, used to point the traced handle at the same per-test schema as the primary handle.

deleteOne attempts to delete a single message and updates the local database on success. Returns resultSuccess (including 404/already-deleted), result

embedBatch fetches subject/body for ids, preprocesses each, calls the embedding client, and assembles the resulting chunks. Messages that vanished bet

ensureNotifyChannel lazily initializes timerNotify to prevent blocking on a nil channel if mockClock{} is instantiated directly without newMockClock()

ensureParticipantsPhoneUniqueIndex upgrades legacy databases whose idx_participants_phone was created as a non-unique partial index before the schema

escapePath normalizes a file path for use in DuckDB SQL strings.

execerContains reports whether the execer-level captures contain sub.

executeSearchQuery runs a search query built from conditions and the optional FTS join, returning paginated MessageSummary results. Shared by Search a

fetchContentLength does a HEAD request and returns the Content-Length of the eventual asset (following redirects to the S3 backend). Returns 0 if the

fetchLidMap reads the WhatsApp jid_map table to build a mapping from lid JID row IDs to their corresponding phone JIDs. The jid_map table links two ji

fillScreen fills the remaining screen space with blank lines for table views.

fillScreenDetail fills remaining space for detail view (uses detailPageSize).

formatArgsShape renders bound parameters as a redacted shape summary — type plus, where meaningful, length — without ever emitting the raw value. Stri

formatCount formats a count as a human-readable string (e.g., "1.5K", "2.3M").

formatDisplayList converts a semicolon-separated PST display list to a comma-separated header value. PST DisplayTo/Cc/Bcc fields contain display names

ftsTerms turns a raw free-text query into the dialect-neutral term slice for the hybrid BM25 branch, mirroring the --mode fts path (Store.SearchMessag

genMessageCount returns index_generations.message_count for a generation.

Single-message helpers (still used by GetMessage for single PK lookups)

hasNumericOffset returns true if the string contains a numeric timezone offset or Z (UTC). Named timezones like "MST" have platform-dependent behavior

hasPathPrefix checks if path is equal to or a child of dir. This prevents prefix attacks like tokensDir-evil matching tokensDir, and correctly handles

hydrateHybridResults fetches subject, sender, and sent_at for each hit from the main DB, preserving the RRF ordering of the input hits. rebind conver