Normalize the configured STT language ("auto", "" → None; everything else passed through trimmed). Mirrors `voice::language::configured_language` with

Build the CORS response header lines (each `\r\n`-terminated) for an outgoing response, given the `Origin` to reflect (from [`RequestGuard::check_requ

Return the on-disk size of the memory database in bytes, estimated from SQLite's `PRAGMA page_count` × `PRAGMA page_size`.

Run the dreaming consolidation cycle. Returns: (promoted_count, pruned_count)

Return true when `base_url` resolves to a localhost address. PrivacyProxy must always run on-device; a remote URL would defeat the privacy guarantee

True when a token is configured and will be enforced on mutating routes.

Append `:default_port` to `authority` unless it already carries an explicit port. Bracket-aware so a bare `[::1]` correctly gets the default added (a

Route a chat turn through the on-device PrivacyProxy. Seeds the proxy with anonymization-eligible memory terms (those whose `EscalationPolicy` is `An

Token estimate from a byte length. Shared by [`estimate_hydration_tokens`] and the incremental fit in [`fit_entries_to_budget`] so both paths apply th

Execute the skill and parse the JSON result into success/output. The C ABI call runs on a blocking thread under the configured deadline (see [`SkillI

Export a conversation as JSON.

Extract key-value facts from structured document lines. Handles patterns common in resumes and profiles: - "Name: Jared Smith" - "Email: jared@exampl

Find the first sidecar manifest that exists for a skill shared library.

Cut a captured value at the first clause boundary so trailing conjunctions and subordinate clauses are not swallowed into an identity/preference fact.

Drain stale samples from the ALSA capture queue before a real recording. Without this, between-cycle residue (kernel DMA carry-over from the prior are

Friendly name from attributes, or entity_id as fallback.

Public chokepoint entry for specialized fast-paths (e.g. the voice `web_search` renderer) that need the gate's ACL / confirmation / rate-limit decisio

Geocode a location name using Open-Meteo's geocoding API.

GET /api/tegrastats — recent history from governor's SQLite.

`403` response for a gated-out request, reusing the shared rejection reason.

GET /api/health — rich system status.

GET /api/web-search

Resolve the configured Home Assistant endpoint, if this deployment uses one.

Ingest a text/markdown file into memory. Reads the file, splits into paragraphs, extracts facts from each. Returns the number of new facts stored.

Get the HTTP header for a credential. Returns (header_name, header_value) ready for injection. This is the ONLY way secrets leave the store — as HTTP

Register a token minted in-process for a first-party adapter (e.g. the Telegram channel's loopback credential). Overrides any configured value; a blan

Get the inner value without checking (use sparingly).

Check if an environment variable name should be blocked.

(query, candidate) pairs exercising: empty sides, no/partial/full overlap, repeated words (distinct-set cardinality), case folding on both sides, coll

Emit a structured trace event when the voice pipeline resolves (or fails to resolve) a speaker identity. Called once per voice turn regardless of prov

Whether the current deployment should manage a given service alias.

Return supported sidecar manifest candidates for a skill shared library.

Mark several memories as promoted in one pass. Applies every `promoted = 1` update and records each promotion's canonical event, then rebuilds the ca

True when policy classification needs the allocating lowercase content view.