Generate a random NIP-42 challenge (32 CSPRNG bytes, hex-encoded).

Return a reference to the process-global `ModelManager`.

The host that resolved to this community. Authoritative for the NIP-05 domain and audit labelling; never re-derive the community from it downstream —

Insert a community with a unique host. Returns its `CommunityId`.

Record an event ID as locally-published for dedup, scoped to the community it was fanned out in. Called before Redis publish so the multi-node consume

Parse NIP-10 thread tags from a Nostr event. Detection logic (per research doc §4c): - Find an `e` tag with `root` marker → its value is `root_event_

Submit a signed command event via REST and assert it was accepted.

Write the pointer under a precondition (§Push step 7 — the CAS). Returns `CasOutcome::LostRace` on 412 (the standard losing outcome). On `CasOutcome:

Query events via the HTTP bridge: `POST /query` with NIP-98 auth. Accepts a slice of `nostr::Filter` (serialized as JSON array). Returns the events a

Returns the relay WebSocket URL, checking the workspace override first. Precedence: workspace override > env vars > build-time vars > default.

Identity resolution over an [`IdentityKeyStore`] seam. Split from [`load_or_create_identity`] so the probe/recover branches are testable without the l

(Source) Build the payload event carrying the secret.

Send a REQ for the given sub_id and p_hex, then consume the EOSE.

Validate UUID string. Returns CliError::Usage on failure.

Send a WebSocket message with a hard timeout. All `ws.send()` calls go through here so a stalled TCP socket can't wedge the background task. On timeo

Build a git patch event (kind:1617, NIP-34). `content` is the verbatim output of `git format-patch` — not truncated. NIP-34 says patches SHOULD be us

Create a DM via a signed kind:41010 (DM open) command event and return the channel_id UUID string parsed from the relay's `response:{...}` message.

Derive the transcript hash that binds all session parameters together. ```text transcript = session_id ‖ source_pubkey ‖ target_pubkey ‖ sas_inpu

Emit NIP-29 group discovery events (39000, 39001, 39002) signed by the relay keypair. Called after group creation, metadata changes, or membership cha

Deliver one event to this relay's local subscribers through the access gate. This is the single guarded send path for relay-local EVENT delivery. It

Current state snapshot — synchronous read.

Log a `session/update` notification via tracing. The discriminator field is `sessionUpdate` (not `type`) per the ACP schema. Returns `true` if the up

Build a minimal Config with the given provider and thinking_effort, bypassing from_env(). Uses `Config::for_discovery` as a base and patches the field

Helper: build a PNG with a buzz_persona_pkg tEXt chunk for the given name/prompt.

Parse a settings JSON string into a RuntimeFileConfig using the same logic as read_config_file but without touching the filesystem.

Read a JSON array of objects from `path`, apply `f` to each object, and write back if any mutation returned `true`. Writes back via [`crate::managed_

Read messages until one matches `pred`.

Remove a single subscription and clean up its index entries.

Atomically replace a replaceable event: NIP-16 kinds (0, 3, 41, 10000–19999) and NIP-29 discovery state (39000–39002, called from side_effects.rs). K

Re-queue a batch of events that failed to process. Events are pushed back to the **front** of the channel's queue so they are processed first on the

Run `git <args>` in `cwd`, fail on non-zero exit.

Project persona config into agent subprocess env vars. Pure function — does NOT read the current process env. ACP is responsible for filtering based

Send a message via a signed kind:9 event and return the event_id hex.

Convert any base form to `ws(s)://` for WS connect.