Apply echo cancellation to mic recording. Uses NLMS adaptive filter to estimate and subtract the echo component. If no echo reference is stored (TTS

Deep-clone `args`, replacing any entity-like string argument with a stable canonical token derived from the entities the runtime resolver would act on

Clear the echo reference (called after mic recording is done).

Parse a `Config` from a TOML fragment; every field has a serde default, so the fragment only needs the `[http]` overrides under test.

Decide whether startup may enter voice mode. Push-to-talk consumes stdin, so it is only valid with an interactive terminal. Wake-word mode owns its o

Extract entity-level vocabulary terms from a memory entry for PrivacyProxy seeding. PrivacyProxy builds its substitution map ("Alex" → "__PERSON_1__"

Feed a chunk of raw LLM output. Returns any complete sentences that became ready (already cleaned for TTS). Returns an empty vec once the per-response

Greedily keep the longest in-order prefix of `entries` whose formatted `- {entry}` lines (joined by newlines) fit the hydration token budget. The str

Get a mutable reference to a loaded skill by name.

POST /api/web-search

Redacted posture for dashboards and support tools. This intentionally reports capability and risk state instead of raw TOML, file paths, endpoint URL

Inner implementation that takes explicit limits — exposed `pub(crate)` only so the test module can point at an ephemeral plain-HTTP mock listener (`tl

Scan the skills directory and load all `.so` files.

A `ChatServer` whose LLM points at a dead port (so `/api/health` returns quickly without needing a model), wired with the given HTTP hardening.

Register a credential. Called during startup from config.

Scan text for prompt injection patterns. Two normalized views of the input are matched against, picked per pattern: - **Word patterns** (natural-lan

Spawn a `TcpListener` on a free local port, run `handler` on each accepted connection. Returns the bound address.

Bind to an ephemeral port, start the hardened listener, return the port.

Return up to `limit` trailing non-empty lines from `path`, in file order.

Run a single read/write future under a timeout, mapping both the I/O error and the elapsed-timeout into a descriptive `anyhow` error. `op` labels the

Convert a TOML value to a display string.

Automatic Gain Control — normalize RMS to target level.

Simple 3-band EQ for voice clarity. Voice-optimized curve: - Bass shelf (+2 dB below 200 Hz): warm up thin speaker - Presence peak (+4 dB at 2-4 kHz)

Returns (creating if necessary) the per-chat serialization mutex, updating the entry's last-access timestamp for TTL eviction. Keeping the map under a

Classify a SQLite error string and return an HTTP status code + error message.

Connect to the backend, bounded by the configured connect timeout. The streaming path previously called `TcpStream::connect` with no timeout (issue #

Delete a memory by ID.

Fuse the lexical (BM25/LIKE) and semantic (cosine) recall rankings into a single relevance-ordered list using Reciprocal Rank Fusion. Previously the

Get all messages in a conversation, including the tagged speaker (if any).

Resolve a speaker identity for `request`. `LocalBiometric` scans every enrolled profile file on disk to find a match — synchronous filesystem I/O tha

Identify the best enrolled speaker for a WAV file.

Decode a packed little-endian f32 embedding BLOB (4 bytes per dimension). Returns `None` if the byte length doesn't match `dimensions * 4`.