Aborts a spawned task when dropped. Used to guarantee the localhost callback server doesn't outlive a failed/abandoned PKCE attempt.

Win32 Job Object that owns the harness process and (via Windows' default child-inheritance) every process it spawns. Dropping the handle with `JOB_OBJ

ACP client that owns an agent subprocess and communicates over its stdio. One `AcpClient` per agent process. Multiple sessions can be created on the

Interface for workflow actions that produce side effects. Implemented by the relay to provide direct DB/event access to the executor. This replaces t

Peer index allocator + room lifecycle gate. The `ended` flag and peer admission are synchronized under the same mutex. `add_peer` holds this lock acr

Scaffolding for desktop integration — fields read via serde.

Pool of agents with take-and-return ownership semantics. Agents are either idle (sitting in `agents[i]`) or checked out (running inside a spawned tas

Stop all tracked agents. Send SIGTERM to all process groups first, then wait for exits in parallel to avoid serial 1s waits.

A connected audio peer.

Global registry of active audio rooms.

Append-only, per-community hash-chain audit log backed by Postgres. Each community has an independent chain keyed `(community_id, seq)`. Writes for o

Handle for graceful audit worker shutdown. Signals the worker to stop accepting new entries, drain its buffer, and exit. Independent of `Arc<AppState

Axum extractor that validates Blossom auth, the BUD-11 hash binding, and relay membership (NIP-43, when enabled) from headers BEFORE the request body