Owns the database, PIN rotation and all LiveKit token minting. Kiosk registration, session-stable joins, admin auth, layouts, branding, media uploads and the hosted installer script.
The wire contract every client codes against, plus the annotation engine, canvas renderer and connection policy shared by both clients.