Load a persona pack from a directory. 1. Read and parse `.plugin/plugin.json` 2. For each persona path in the manifest, read the `.persona.md` file 3

This session's ephemeral public key.

Queries events matching the given filter parameters.

Resolve per-channel NIP-01 filters from config + discovered channels.

Atomically write the key to disk. Uses `atomic-write-file` which: 1. Writes to a temp file in the same directory 2. Calls fsync on the file 3. Renames

Three real x-only pubkeys (valid for `PublicKey::from_hex`). Distinct, so we can label them clearly in tests.

Percent-encode a relay URL for use as a query parameter value. Uses `percent-encoding` crate's `NON_ALPHANUMERIC` set, which encodes everything excep

Build a contact list replacement event (kind:3, NIP-02). Each contact is `(pubkey_hex, relay_url, petname)`. `pubkey_hex` must be exactly 64 hex char

Execute a `load_skill` call. Returns a `ToolResult` on success or a user-visible error result if the skill is not found or cannot be read.

Validate a git commit-like hex id (commit, parent-commit, euc, merge-commit, applied-as-commit). Git object ids are full SHA-1 (40 hex chars) or SHA-2

Validate a hex pubkey is exactly 64 hex characters.

(Source) User confirmed the SAS codes match. Build the `sas-confirm` event to publish.

Create a real channel in the DB via REST so the relay accepts events for it.

Derive the session ID from the session secret. ```text session_id = HKDF-SHA256(IKM=session_secret, salt=[], info="nostr-pair-session-id", L=32) ```

(Target) Process the payload event from the source. Only one payload is accepted per session — after this call the state advances to [`SessionState::

(Target) Process the `sas-confirm` event from the source. Verifies the transcript hash and returns the SAS code for the user to visually confirm. The

Check channel membership with a 10-second cache. Falls back to DB on miss.

Build a minimal test event with the given kind and content.

Returns the nest root path (`~/.buzz` for prod, `~/.buzz-dev` for dev), or `None` if the home directory cannot be resolved. If [`init_nest_dir`] has

Derive the d-tag (persona slug) from a `PersonaRecord`. Uses `source_team_persona_slug` if available, otherwise falls back to `id`, then normalizes t

Requeue a cancelled batch so its events appear as `cancelled_events` in the next `FlushBatch` for this channel (enabling the annotated merged-prompt f

Human-readable summary (no secrets).

Validate the public envelope of a NIP-AE `kind:30174` event before it reaches NIP-33 parameterized replacement. We deliberately do this here (not in

Validate a git repo identifier: `[a-zA-Z0-9._-]{1,64}`, no leading dots, no `..`.

Build a signed `kind:30174` event for a given body. `created_at` is the timestamp to sign — callers MUST supply a value respecting the *Writing* mono

Build & sign a kind:30618 event from the manifest's ref state. Signed with `relay_keys` — the relay is the authoritative source of ref state for repo

Resolve the agent command (harness) for a spawn/deploy/summary. The linked persona wins so persona harness edits propagate on the next spawn. An expli

Extract pubkeys from NIP-27 `nostr:npub1…` URIs in content. Scans `content` (which should already have code regions stripped via [`strip_code_regions

Drop recipients without access before fan-out on a private channel. Open and channel-less events skip membership filtering (open channel-scoped event