Replaces any existing subscription with the same sub_id (NIP-01), scoped to the server-resolved community that owns the connection.

Increment the rejection counter with a bounded reason label.

Release local interest in a scoped Redis event topic. When the last retain is released, unsubscribe is delayed by the configured debounce. If another

Resolve the `--reply-to` anchor for a non-DM turn. Returns `Some(id)` only for human-facing turns (see [`turn_is_human_facing`]): - in a thread → the

Retain local interest in a scoped Redis event topic. The first retain for a topic asks the subscriber task to `SUBSCRIBE`. Additional retains only in

Persist a token to disk and the in-memory cell.

Build a `session/update` JSON-RPC notification carrying a `session_info_update` with the given `_meta.goose.activeRunId` value. Pass `None` to omit th

Split text into sentence-sized chunks. Combines regex-based boundary detection with: - Abbreviation awareness (`Dr.`, `Mr.`, etc. don't split) - Digi

Remove fenced code blocks and inline code spans from content. Returns a copy of `content` with ` ```…``` ` blocks and `` `…` `` spans replaced by spa

Build the native-separator `<base>/agents/teams/<id>` string the way production does (per-component `Path::join`), so test expectations match reconcil

Validate pre-commit invariants. Writers must call this before `canonical_bytes` → `put_manifest`. A manifest that hydrators reject (unsafe refname, m

Validate uploaded bytes for the **image** upload path. Checks magic bytes, MIME allowlist (images only), size, and pixel dimensions. Rejects `video/m

Validate an MP4 file on disk. Checks: - Container is MP4 (ftyp brand is not QuickTime `qt `) - First video track codec is `avc1` (H.264 only — rejec

Build a signed kind:30620 workflow definition event with the given YAML content and d/h tags.

Merge a parsed inbound persona into the local set: patch the matching record in place, or push it when none matches. The match key is `persona_d_tag`

Build the canonical JSON envelope (compact, deterministic field order). NIP-GS requires byte-exact canonical form for verification: field order is `v

Build a git pull-request event (kind:1618, NIP-34). `content` is the markdown PR description.

Construct a minimal but parseable MP4 byte stream. Layout (fast-start): ftyp | moov | mdat Layout (non-fast-start): ftyp | mdat | moov The moov cont

Pure decision function for the inbound author gate env vars. Returns the env vars to **set** and the env vars to **remove**. Removal is belt-and-susp

Build a minimal but structurally valid fast-start MP4 (H.264, 1s, 320×240). Layout: ftyp | moov(mvhd + trak(tkhd + mdia(mdhd + hdlr + minf(vmhd + din

Claim a scheduled workflow fire for an authoritative schedule instant. Returns `Some` only for the first pod that claims `(community_id, workflow_id,

Compose `m_after` from the parent manifest and the new ref/pack state. Encodes `Inv_Closed` at the construction site: `m_after.packs ⊇ m_after.parent

Derive the conversation key `K_c` for the agent ↔ owner pair (NIP-44 v2). `K_c` is symmetric: `derive(seckey_a, pubkey_o) == derive(seckey_o, pubkey_

Handle a CLOSED that denies access to a single channel: drop just that channel's subscription (the proven Unsubscribe cleanup) and keep the socket. R

Enforce relay membership for a pubkey, with NIP-OA agent delegation fallback. Returns `Ok(Some(owner_pubkey))` when the agent is not a direct member

Evaluate a boolean filter expression against a `FilterContext`. - Caps expression length at [`MAX_EXPR_LEN`] bytes. - Acquires an owned permit from [

Minimal syntactically-plausible NIP-44 v2 payload (99 zero-filled bytes with the 0x02 version prefix). Real ciphertexts are larger and have real MACs;

Convert a single NIP-01 filter into an [`EventQuery`] for the database. Each filter is queried independently so that per-filter `limit` and time wind

Frame the `session/new` `systemPrompt` so each present prompt carries its own header, keeping the base/persona boundary recoverable downstream. The h