Return true if this batch has no deltas to apply.

Push a chunk into the pending buffer. Arms a one-shot Timeout if none is queued; otherwise returns immediately — the existing timer will pick up this

Drop all but the newest `max_entries` by `(touched_ms, hex)`. Top-K is composable, so trimming after every fold yields the same survivors as a single

Current entry count.

Whether the backing cache holds no entries.

Scan tokenized text and return the first phrase hit that aligns to term boundaries. `normalized_text` must already be [`normalize_moderation_text`] ou

Current consuming path.

Appends one redacted event as a JSON line.

Authenticate a provider request before handing it to provider dispatch.

Enforce admin access rules using the configured token and local-only policy.

Spawn the periodic flush task. It re-reads the runtime config every tick so an admin toggling the feature on/off takes effect without a restart, and f

Select one eligible channel name.

Path of the backing YAML config file.

Adds a nullable UTF-8 column to an existing table without rewriting old rows.

Run the HTTP server until interrupted.

Stable diagnostic label for this source.

Helper function to construct route paths

Stable serialized representation.

Build a `400 Bad Request` error.

Compile normalized keywords — each paired with its risk-category codes — into one scan automaton. Empty patterns (and their categories) are skipped; r

Parse CLI arguments.

Flushes remaining thinking/text buffers and emits final SSE events. If only a thinking block was produced (no text or tool_use), sets stop_reason to

Load one config file and prepare it for future hot reloads.

Try to decode one frame from the buffer. Returns `Ok(None)` when there is not enough data for a complete frame.

Emits `message_start` and (if thinking is disabled) the initial text block start event.

Convenience helper returning the current Unix timestamp in milliseconds.